aries-common: SELinux

- Added basic sepolicy to allow device to boot (there's a bug that
  crashes the device without it)
- Added other sepolicies to fix denial and tighten processes
- Uses bind mount instead of symlink because file_contexts uses real
  path

PatchSet #2: Modified to compile with Slim.

Change-Id: I16628a9d4b8e1f66ccfc84df4adeee53eaf79bf9

Signed-off-by: Josue Rivera <prbassplayer@gmail.com>
Merge "aries-common: SELinux" into jb4.3