Tresys maintains a working SELinux policy
