sepolicy: Fix remaining ghost denials

Change-Id: I4ec5d15dd8367e07d191a915664b36083d2ad803
Merge remote-tracking branch 'upstream/cm-10.2' into cm-10.2