https://fedoramagazine.org/use-udica-to-build-selinux-policy-for-containers/