ghost: Add device-specific SELinux policies

Change-Id: Ic00e0532f6bab992fca6f1141d8cf6d092aed42c