need advise: tomcat5 selinux policy