update sepolicy to align with aosp