Cosmic-OS/device_qcom_sepolicy 1 merged

• fix some denials Jan 31