m7: selinux: more rules

Change-Id: Ia9431f4f5fb12a3ed047e6927f8b594f6be7243c
Merge remote-tracking branch 'upstream/cm-10.2' into cm-10.2