[PATCH openEuler-1.0-LTS] selinux: fix potential counting error in avc_add_xperms_decision()