Changed some more sepolicy properties

Change-Id: I02e7532052685c11bdc989a6b71986d885e017ae

BoardConfigCommon.mk

@@ -49,7 +49,6 @@ ENABLE_CPUSETS := true
 
 # Boot image/kernel
 BOARD_KERNEL_CMDLINE := androidboot.hardware=qcom user_debug=31 msm_rtb.filter=0x237 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 boot_cpus=0-5 loop.max_part=7 dwc3_msm.hvdcp_max_current=1500 dwc3_msm.prop_chg_detect=Y coherent_pool=2M
-# BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive
 BOARD_KERNEL_IMAGE_NAME := Image.gz-dtb
 BOARD_KERNEL_PAGESIZE := 4096
 BOARD_KERNEL_BASE := 0x00000000

sepolicy/fsck.te

+allow fsck diag_partition_device:blk_file { read write };

sepolicy/radio.te

+allow radio gpuservice:binder call;
+allow radio system_app_data_file:dir getattr;

sepolicy/system_app.te

@@ -6,3 +6,7 @@ allow system_app timekeep_prop:file read;
 allow system_app sysfs_rtc:dir search;
 allow system_app time_data_file:file { getattr open write };
 allow system_app vendor_default_prop:property_service set;
+allow system_app apex_service:service_manager find;
+allow system_app proc_pagetypeinfo:file read;
+allow system_app sysfs_zram:dir search;
+allow system_app system_suspend_control_service:service_manager find;