'CVE-2015-4495 and SELinux', Or why doesn't SELinux confine Firefox?