Merge "sepolicy/common: Allow cnd to execute ioctls"