m7: selinux: more rules

Change-Id: Ia9431f4f5fb12a3ed047e6927f8b594f6be7243c