Merge "sepolicy: add rule for CNE."