added -A for ACLs in SELinux