RFE: add tests for SELinux attribute event filtering

[pcmoore]

Test the ability to filter events based on the different SELinux attributes for both subjects and objects.