more selinux/android config, from hammerhead kernel