device.mk; reenable selinux stuff

part 1 of 2