Changed some more sepolicy properties

Change-Id: Id38ad3bb948a19ae14e6cdfbc8e794612b210533

sepolicy/fsck.te

 allow fsck diag_partition_device:blk_file { read write };
 allow fsck self:capability { dac_override dac_read_search };
+allow fsck tmpfs:blk_file getattr;

sepolicy/zygote.te

 allow zygote proc_cmdline:file { getattr open read };
-allow zygote device:file write;
+allow zygote device:file { open write };