Add SELinux filesystem relabeling to init

Since not all recoveries out there will support the OTA packages'
own labeling, check at boot if the system needs labels (and
apply them)

Change-Id: I58767977b90a78a12efe7bd9d713654eadf47e7a

Conflicts:
	config/common.mk
selinux: Use a more reliable sentinel to flag /data labelling

/data/anr isn't present on all devices, /data/system is

Change-Id: Ifba71d073dc7b577911386cff316e8a19662cd0d
selinux: When adding userdata labels, do cache too

Change-Id: I0c1ff737629474135767be7cfe2bfbea0513fa9e
sepolicy: Start slim Common sepolicy

Rather than having to maintain out of tree changes, it is often
easier to maintain a hiearchy of changes, starting with the vendors
common config file. From there, inheriting products can pick up a base
and start to add or remove certain bits from it, making use of the
BOARD_SEPOLICY_* functions documented in external/sepolicy/README.

TODO: our gapps have another sign key...we need to add as well

Change-Id: I28a4aaf6c126535f0a88001582641b234a750015
Merge "Add SELinux filesystem relabeling to init" into jb4.3
Merge "selinux: Use a more reliable sentinel to flag /data labelling" into jb4.3
Merge "selinux: When adding userdata labels, do cache too" into jb4.3
Merge "sepolicy: Start slim Common sepolicy" into jb4.3
Update Nova to 2.2.1

Change-Id: Ic0ffd8a9abed7956f8a94c2e3e543d61ea343fa4
Merge remote-tracking branch 'Slim/jb4.3' into slim4.3