Make sensors enforcing.

Change-Id: I7e9796958d5a0c21c8a31a5576388d58f1890da2
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Merge commit 'refs/changes/98/71698/1' of https://android.googlesource.com/device/lge/hammerhead into kk4.4
Make camera enforcing.

Change-Id: I16ab36e31d6601fb2b66712dec8809354b98b8ce
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Make qmux enforcing.

Change-Id: Ia07c7b1f251ce1070b38279ad7dc7418bcde322d
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Make bridge enforcing.

Change-Id: If826dcf523de47e9ec9356de6c9fc314acdb06d6
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Make time enforcing.

Change-Id: I87afd1f1c0f7b2942dd2091d0fea9dc72ef38260
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Fix surfaceflinger SELinux denial.

Allow surfaceflinger to write to files in
/sys/devices/virtual/graphics/fb1

This addresses the following denial:

    5.319406   type=1400 audit(10944353.380:8): avc:  denied  { write } for  pid=184 comm="surfaceflinger" name="vendor_name" dev="sysfs" ino=10944 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:sysfs:s0 tclass=file

Change-Id: I0f70af5d523a1d8ef7a9b93de50aca7b6a946236
Address comments from previous review

Let's list out the individual files, instead of allowing bulk
access to all of /sys/devices/virtual/graphics/fb1

Change-Id: I0b1014dcdfd2284f7bdf759e896782e1b083f386