sepolicy: fix remaining denials

Enforcing works on msm8960dt

Change-Id: I1a7e6baa82abd977cb3653cdcf466c3841524cf7
Remove unused CFLAGS

Change-Id: Ia3144ae9bc2b121a8fc3558711160cb6a2ac3a7c
Merge commit 'd9f8e6053d5a8b9d00f7336a06f26edc901071d3' into kk