profiles/features/selinux/profile.bashrc

# SELinux-aware progams write to entries here
SANDBOX_WRITE="${SANDBOX_WRITE}:/selinux/:/sys/fs/selinux/"

# for setfscreatecon
SANDBOX_WRITE="${SANDBOX_WRITE}:/proc/self/"