Don't read selinux policies from /data

Bug: 12613118
Change-Id: I9b2dfeeda4135762ed418ec6e29e39fa2a8328e5
(cherry picked from commit c661446c4607bb54ccf3104727086b56d49ad250)
DO NOT MERGE: Fix a bug in the userspace AVC that broke per-domain permissive mode.

Failure to copy the entire av_decision structure, including the
flags field, would prevent preservation of the SELINUX_AVD_FLAGS_PERMISSIVE
flag and thus cause per-domain permissive to not be honored for userspace
permission checks.

Also ensure that we clear the entire structure.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

(cherry picked from commit 0dbac4eafd82ba0d9d9fa4ecf9bfdd34b6db2b52)

Bug: 13450413
Change-Id: I36c7445dc385e647e4f0f4a2dee04723d1b7c9bc
Merge tag 'android-4.4.3_r1' into HEAD

Android 4.4.3 release 1

Change-Id: Ie9409cc17fa8e2a97c9836804acd68f7f656fa13