Enable sepolicy again.
mediaserver.te should be okay now, might still need some work.