sepolicy: sepolicy rule to remove create file permissions

for IO cgroups

While configuring IO cgroups, only cgroup directory is
created. cgroups files are not explicitly created, only
permissions are modified. Hence create should be replaced
with rw.

Change-Id: Ia96eee028a2736d0c3b084023cf46f7130741764