Chapter 8. Writing a custom SELinux policy