update sepolicy for lollipop