sepolicy: core-ctl related changes

Denied logs were observed while doing insmod of core ctl
kernel object. Due to this, the ko was not getting loaded.

This is resolved by adding the policy related to cgroup.

Change-Id: I722e678af719b5f135a5208b27278ab47d960b6b