SELinux: call capabilities code directory