m7: selinux: add policies

based on mako

Change-Id: Id6bf9d5a2556beee855e6aa908af4a577e82403f