sepolicy: fix remaining denials

Enforcing works on msm8960dt

Change-Id: I1a7e6baa82abd977cb3653cdcf466c3841524cf7