Adjusted scripts and policies.

Modified the policy so that reading files is allowed only in a subdirectory of /tmp.

systrace-related additions and fixes.