Break policycoreutils out into separate packages for the various utilities.

The driver beind this is to no longer force all of these utilities
on to images that want to have an SELinux policy. With this patch
in place it will be possible to create an image with the minimal
set of tools necessary to load a policy.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Remove runtime dependence on policycoreutils from the reference policy.

The only thing refpol should depend on at runtime are the things
necessary to load the policy.  If init is patched then we only need
the config.  It may be necessary to include policycoreutil-loadpolicy
as well in the absence of a patched init.
Add image and packagegroup for minimal SELinux install.
Prefer the 3.8 kernel till the 3.10 recipe is ported over from master-next.
Add runtime dependency on SELinux utilities needed by the init script.
Check for the availability of 'secon' and 'setenforce' in selinux-init.sh like we do the other utilities.
Use shadow as the login manager.