policy default deny
allow		uid=500		*		*		*