SELinux policy for docker