SELinux: include definition of new capabilities

The kernel has added CAP_WAKE_ALARM and CAP_EPOLLWAKEUP.  We need to
define these in SELinux so they can be mediated by policy.

Change-Id: I8a3e0db15ec5f4eb05d455a57e8446a8c2b484c2
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>
[sds: rename epollwakeup to block_suspend to match upstream merge]
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Merge "SELinux: include definition of new capabilities" into cm-11.0
apexq/expressatt: move makefile to device tree

Change-Id: I436199feec727a3c73ea4178d6da90d1a6563143
Prima 3.2.6.125

Change-Id: Ib9b4d45d745048135fb903165dd34ec893a77ecc
Merge remote-tracking branch 'upstream/cm-11.0' into HEAD