Two questions about selinux