sepolicy: fix remaining denials

Enforcing works on msm8960dt

Change-Id: I1a7e6baa82abd977cb3653cdcf466c3841524cf7
Merge branch 'cm-11.0' into martincz