hammerhead: Update SELinux policy

Address various denials.

Change-Id: I73a3adeb7678244bc5760812ac3d36e2d561fa96