kernel: refine syscall_hook_manager

- Don't unmark process when setuid if syscall tracepoint is in use
- Remark process when app profile updated
- Ensure zygote is marked on first boot

kernel/selinux/selinux.h

@@ -21,6 +21,8 @@ bool is_ksu_domain(void);
 
 bool is_zygote(const struct cred* cred);
 
+bool is_init(const struct cred* cred);
+
 void apply_kernelsu_rules(void);
 
 u32 ksu_get_ksu_file_sid(void);