How it works (2/11) http://www.imperialviolet.org/2009/07/14/selinux.html