Update location of kernel toolchain
aries-common: SELinux

- Added basic sepolicy to allow device to boot (there's a bug that
  crashes the device without it)
- Added other sepolicies to fix denial and tighten processes
- Uses bind mount instead of symlink because file_contexts uses real
  path

Change-Id: I16628a9d4b8e1f66ccfc84df4adeee53eaf79bf9
aries-common: repartition /system to 600M

The current 400M partition is too small now.

Change-Id: Ie38c41fd2c0d6d5518c7e809d4af3d27af5c1193
Ignore unused variable error