[Bug 1079540] New: Document SELinux sandboxing