SELinux: validate kernel object classes and permissions