selinux policies, RHEL5 and puppet