sepolicy: add device-specific sepolicies

Change-Id: Ibfce7ff8fcd2ca42d8e6b9b20eb662538a0915ce