selinux: add policies

Add policies for "su", and more...

Change-Id: I186a14337b90f6292c8e01cbe2c7376f907fa596
Merge remote-tracking branch 'upstream/cm-10.2' into cm-10.2