[SuperSU] doitright:
Here is the log for su -c "dumpsys power":

[ 1593.737323] type=1400 audit(1444331537.131:57): avc: denied { read write } for pid=7828 comm="daemonsu" name="2" dev="devpts" ino=5 scontext=u:r:init:s0 tcontext=u:object_r:untrusted_app_devpts:s0:c512,c768 tclass=chr_file permissive=1
[ 1593.738231] type=1400 audit(1444331537.131:58): avc: denied { open } for pid=7828 comm="daemonsu" path="/dev/pts/2" dev="devpts" ino=5 scontext=u:r:init:s0 tcontext=u:object_r:untrusted_app_devpts:s0:c512,c768 tclass=chr_file permissive=1
[ 1593.738383] type=1400 audit(1444331537.131:59): avc: denied { ioctl } for pid=7828 comm="daemonsu" path="/dev/pts/2" dev="devpts" ino=5 ioctlcmd=540e scontext=u:r:init:s0 tcontext=u:object_r:untrusted_app_devpts:s0:c512,c768 tclass=chr_file permissive=1
[ 1593.738555] type=1400 audit(1444331537.131:60): avc: denied { getattr } for pid=7829 comm="daemonsu" path="/dev/pts/2" dev="devpts" ino=5 scontext=u:r:init:s0 tcontext=u:object_r:untrusted_app_devpts:s0:c512,c768 tclass=chr_file permissive=1
[ 1593.786766] binder: 276:276 transaction failed 29201, size 16-4
[ 1593.786783] binder: send failed reply for transaction 240727 to 7833:7833
[ 1593.787003] type=1400 audit(1444331537.181:61): avc: denied { transfer } for pid=276 comm="servicemanager" scontext=u:r:servicemanager:s0 tcontext=u:r:init:s0 tclass=binder permissive=0
[ 1594.307745] type=1400 audit(1444331537.701:62): avc: denied { write } for pid=7834 comm="app_process32_o" name="system@framework@boot.art" dev="mmcblk0p42" ino=1441796 scontext=u:r:shell:s0 tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file permissive=0
[ 1594.350893] type=1400 audit(1444331537.741:63): avc: denied { write } for pid=7834 comm="main" name="arm" dev="mmcblk0p42" ino=1441795 scontext=u:r:shell:s0 tcontext=u:object_r:dalvikcache_data_file:s0 tclass=dir permissive=0

Edit... here is for the "pm disable":

[ 40.633058] type=1400 audit(1444332049.447:19): avc: denied { transfer } for pid=274 comm="servicemanager" scontext=u:r:servicemanager:s0 tcontext=u:r:init:s0 tclass=binder permissive=0

Edit 2: I think maybe the kill -9 denial may be due to a bug in the context switching function of RootShell, since I got this from *after* switching context back to ShellContext.NORMAL, and it looks like its still under system_app...

[ 128.221706] type=1400 audit(1444332500.945:34): avc: denied { write } for pid=4412 comm="tmp-mksh" name="oom_adj" dev="proc" ino=45665 scontext=u:r:init:s0 tcontext=u:r:untrusted_app:s0:c512,c768 tclass=file permissive=1
[ 128.385370] type=1400 audit(1444332501.115:35): avc: denied { setopt } for pid=4427 comm="daemonsu" scontext=u:r:init:s0 tcontext=u:r:system_app:s0 tclass=unix_stream_socket permissive=1
[ 128.387085] type=1400 audit(1444332501.115:36): avc: denied { listen } for pid=4427 comm="daemonsu" path=0065752E636861696E666972652E737570657273753A636F6E746578743A34343237 scontext=u:r:init:s0 tcontext=u:r:system_app:s0 tclass=unix_stream_socket permissive=1
[ 128.402369] type=1400 audit(1444332501.125:37): avc: denied { accept } for pid=4427 comm="daemonsu" path=0065752E636861696E666972652E737570657273753A636F6E746578743A34343237 scontext=u:r:init:s0 tcontext=u:r:system_app:s0 tclass=unix_stream_socket permissive=1
[ 128.449058] type=1400 audit(1444332501.175:38): avc: denied { search } for pid=4433 comm="sugote-mksh" name="4423" dev="proc" ino=47306 scontext=u:r:system_app:s0 tcontext=u:r:untrusted_app:s0:c512,c768 tclass=dir permissive=0