Manipulating SELinux policies