Some catch-up with the sepolicy in AOSP master.  Thanks to MWisBest

https://github.com/MWisBest/device_samsung_tuna/commit/4be8cf7960421c20064873256e5fd8dcf5bdad4e