Eh, SELinux policies are for simpler to write than most people think, especially for the relative simplicity most of the services on IoT devices run. The hardest part is just identifying what a process needs access to, which is pretty straightforward by running in permissive mode and then reviewing the audit log.