//usr/bin/checkpolicy