Initial SELinux policy.

Squashed commit of the mako's policy files from upstream
SEAndroid:

Some early policy work for bringing up the board.

Change-Id: I882b2c825edcf1fc59a3059ece21a80598c7a419
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Move init_shell domain definition and common rules to core sepolicy.

More SELinux policy related changes.

* create a qmux_socket domain for talking with
  the qmuxd multiplexer.
* add a new domain for a shell that is started
  by init using a UID other than shell.

Change-Id: Idaaa1b8a36f6d8cd79f25fc66c59ede0bedd7900
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Change domain qmux_socket to qmuxd_socket.

This is a temporary fix for some build issues.

Change-Id: I3701bbaf72e61feed7a4ac803140d5cf764ed6f0

More SELinux policy changes.

Change-Id: Ie145ed63d898c5f506ee25c8a22fb3e2379ef29c

Minor SELinux policy updates.

Change-Id: Ib8e85c9f6439c943aabddb7543bfb9a77d80f982
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Move bluetooth_device domains to hci_attach_dev domain.

In the interest of minimizing per-device policy, relabel
/dev/smd2 and /dev/smd3 as hci_attach_dev domains.

Change-Id: Iaa511a8610672994482d39b5064a8c7d0d1a90c2
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Yet another mako policy (YAMP)

- Updates to some property service policy for
  both bluetooth and net manager

- Updates to tee and drm access

Change-Id: I0d634dd437ea717b4ad38be93c3993bbe55e49a9
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
selinux: Adjust policies to the g's hardware

Change-Id: Ic1223ff2707a5efa930ba21a1d5129b90af80eff
selinux: Fix access to camera socket

Ignoring the error isn't enough, the qcamera-daemon will fail
if it can't remove a pre-existing socket, so let that happen

Change-Id: Ie9d8d58a5c4903a1d25e82ddb3295485a57b85ae
merge CyanogenMod

Change-Id: Ia8fbf5545ae7b9dd7435e19f4ed37ad1f39f0fd2