updated the sepolicy to get rid of the denials