policy for mock - put in mock package or selinux-policy-targeted?