update selinux policy