Make SELinux policies more 4.4 compatible

Change-Id: I8494f924f1d979fe88eae60ffc118cf34a90184c