linux: adjust default policy rules