checkpolicy: update to 3.5