Sepolicy: Fix camera & surface flinger denials

Device node were not proper /dev/msm_camera was
labelled as audio_device which is wrong and
/dev/msm_rotator as well as audio_device, so
changing the label to appropriate to fix the false positive
denials.

Change-Id: I7b3ebbcb9999d794823ee7c0d7cad330d50be02e
sepolicy: Update policy for secure components

Playready stores license under /data/data/app_ms. All TZ apps including
Playready would create their own directory under /data/misc/qsee.
To get test apps working with older dir structure, userdebug mode
build would have permision to create directory under /data/data.
Test apps based on newer targets must move to new structure.
Also add policies for secureUI.

Change-Id: Ibc4412ca9e8e065d54263bb46333bd223dfb553d
SEAndroid: Fixing few denials

This fixes the below issues

1. 744304 - SELinux Surf port Enumeration issue
   Files changed - mdm_helper.te
                 - rild.te
                 - file_contexts
                 - file.te
                 - rmt_storage.te
                 - device.te
2. 751137 - WIFI is not turning ON
   Files Changed - wpa.te
                 - system_server.te

3. Issues related to CTS testInitDomain and boot up
   denials for other domains.

CRs-fixed: 744304 751137

Change-Id: I2785e85592a10468a667be363e6115e27b76707f
msm8960: Add rules for bridgemgr

Most Fusion devices have this to talk to rmnet.
Add common rules for it

Change-Id: If2989904be017b6f979da99bfd321ac62ddbbfbb
mpdecision: Let mpdecision tune KSM

Change-Id: I6d7511d94996dcec974b671d681fd70a8dbc4290
HAX: Enable access to diag on user builds

This should be temporary. Some components (radio and display, mostly)
still rely on diag for logging, and its absence makes the whole subsystem
spin and break things. Pending fixing those components, re-enable diag.

Change-Id: Ic6badb3f89d08ef247455bc669392bea53c33bab