Fix permission equality check

Class name is not unique, and only defines the name of the permission in XML.
Package name must be included in the comparison, otherwise it's possible
to override a permission's attributes.

Test: verify vulnerability with test apps requesting privileged permission
Test: verify fixed with patch

Bug: 141854898

Change-Id: I3ede88b3b8395e78ddee0508a86381d63472ffde