sepolicy: For firmware/image