SELinux Type-Enforcement Rules

libiphone/iFuse don't currently have SELinux rules included. Here is a basic set to start with, although they should probably be tightened up a bit:
* only permit libiphone/iFuse to access usb_device_t instead of all mount_t * don't write to ~/.config (admin_home_t) while mounting, should only be done from unconfined_t * why is getsched being called? Can it be eliminated too?

Thanks for writing such an awesome library/tool!

=== ifuse.te ===

module ifuse 1.0;

require {
        type admin_home_t;
        type mount_t;
        type usb_device_t;
        class process getsched;
        class chr_file { read write ioctl };
        class dir write;
}

#============= mount_t ==============
allow mount_t admin_home_t:dir write;
allow mount_t self:process getsched;
allow mount_t usb_device_t:chr_file { read write ioctl }

=== end ifuse.te ===