cobbler selinux policy