sepolicy: More rules for recovery

Change-Id: Ie50c04eb83cb9c62f679a1c1aa2ac482af159f7e
Merge remote-tracking branch 'cm/cm-12.0' into cm-12.0