selinux: Fix a couple of denials

Change-Id: Ib034dad1640819bc90a400127d6ff234f559d266
Merge remote-tracking branch 'cm/cm-12.0' into L5