Merge "sepolicy : add allow rule to do key search on kernel."