[relnotes] [Bug 533585] Explain SELinux sandbox