selinux: Add device-specific rules

Change-Id: I69952d49ef0b48d634debc5ac5bc7c2eeea23903