This problem is being discussed on https://github.com/SELinuxProject/selinux-kernel/issues/21 We would need to have a working solution in upstream kernel, userspace and policy before we can use it Red Hat Enterprise Linux. Therefore I'm closing this as WONTFIX.