hardened Gentoo SELinux policy for finger