update sepolicy to CM