Initial SELinux policy.

Some early policy work for bringing up the board.

Change-Id: I882b2c825edcf1fc59a3059ece21a80598c7a419
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Move init_shell domain definition and common rules to core sepolicy.
More SELinux policy related changes.

* create a qmux_socket domain for talking with
  the qmuxd multiplexer.
* add a new domain for a shell that is started
  by init using a UID other than shell.

Change-Id: Idaaa1b8a36f6d8cd79f25fc66c59ede0bedd7900
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Change domain qmux_socket to qmuxd_socket.

This is a temporary fix for some build issues.

Change-Id: I3701bbaf72e61feed7a4ac803140d5cf764ed6f0
More SELinux policy changes.

Change-Id: Ie145ed63d898c5f506ee25c8a22fb3e2379ef29c
Minor SELinux policy updates.

Change-Id: Ib8e85c9f6439c943aabddb7543bfb9a77d80f982
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Move bluetooth_device domains to hci_attach_dev domain.

In the interest of minimizing per-device policy, relabel
/dev/smd2 and /dev/smd3 as hci_attach_dev domains.

Change-Id: Iaa511a8610672994482d39b5064a8c7d0d1a90c2
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Yet another mako policy (YAMP)

- Updates to some property service policy for
  both bluetooth and net manager

- Updates to tee and drm access

Change-Id: I0d634dd437ea717b4ad38be93c3993bbe55e49a9
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
selinux: Fix access to camera socket

Ignoring the error isn't enough, the qcamera-daemon will fail
if it can't remove a pre-existing socket, so let that happen

Change-Id: Ie9d8d58a5c4903a1d25e82ddb3295485a57b85ae