mock SELinux policy as RPM package