SELinux policy for wm
