Enhancing SELinux policies