Sepolicy: Fix camera & surface flinger denials

Device node were not proper /dev/msm_camera was
labelled as audio_device which is wrong and
/dev/msm_rotator as well as audio_device, so
changing the label to appropriate to fix the false positive
denials.

Change-Id: I7b3ebbcb9999d794823ee7c0d7cad330d50be02e
sepolicy: Update policy for secure components

Playready stores license under /data/data/app_ms. All TZ apps including
Playready would create their own directory under /data/misc/qsee.
To get test apps working with older dir structure, userdebug mode
build would have permision to create directory under /data/data.
Test apps based on newer targets must move to new structure.
Also add policies for secureUI.

Change-Id: Ibc4412ca9e8e065d54263bb46333bd223dfb553d
SEAndroid: Fixing few denials

This fixes the below issues

1. 744304 - SELinux Surf port Enumeration issue
   Files changed - mdm_helper.te
                 - rild.te
                 - file_contexts
                 - file.te
                 - rmt_storage.te
                 - device.te
2. 751137 - WIFI is not turning ON
   Files Changed - wpa.te
                 - system_server.te

3. Issues related to CTS testInitDomain and boot up
   denials for other domains.

CRs-fixed: 744304 751137

Change-Id: I2785e85592a10468a667be363e6115e27b76707f
msm8960: Add rules for bridgemgr

Most Fusion devices have this to talk to rmnet.
Add common rules for it

Change-Id: If2989904be017b6f979da99bfd321ac62ddbbfbb
mpdecision: Let mpdecision tune KSM

Change-Id: I6d7511d94996dcec974b671d681fd70a8dbc4290