add sepolicy for gpu device