hardened Gentoo SELinux policy for the QEMU tools