fixup sensors files.

The sensors data files are improperly labeled on old
devices. Fix them up.

Bug: 12416169
Change-Id: I3377c0993cec21535f07233ff9b7d72334b0cf08
Allow the radio to access qmux

Addresses the following denial:

<5>[  508.313455] type=1400 audit(1389033492.145:78): avc:  denied  { search } for  pid=3932 comm="QcRilReceiver" name="qmux_radio" dev="tmpfs" ino=6056 scontext=u:r:radio:s0 tcontext=u:object_r:qmuxd_socket:s0 tclass=dir

And the following logcat error messages:

E/QcrilMsgTunnelSocket( 3916): IOExceptionjava.io.IOException: Permission deniedReason: Permission denied
E/QcrilMsgTunnelSocket( 3916): Couldn't find 'qmux_radio/rild_oem0' socket after 8 times, continuing to retry silently

Change-Id: I7894aea69a7b5c956948527e55fc1a7b73f5e165
Address new thermald and mpdecision SELinux denials.

* The thermal service needs rw access to
  /sys/module/msm_thermal/pmic_sw_mode/vdd_dig/mode and
  /sys/module/msm_thermal/vdd_restriction/enabled. Allow
  dac_override for now til the perms can be properly
  fixed in the kernel. The perms are:
    --w----r-T root     root              u:object_r:sysfs:s0 mode
    --w----r-T root     root              u:object_r:sysfs:s0 enabled

* In order to avoid a dac_override with access to
  /sys/devices/system/cpu/cpu0/cpufreq/scaling_min_freq
  the perms were changed to 664 from 644. This allows
  both mpdecision and thermal services to access it.
  This addressed the following denials:
type=1400 msg=audit(2996841.439:197): avc:  denied  { dac_override } for  pid=1944 comm="mpdecision" capability=1  scontext=u:r:mpdecision:s0 tcontext=u:r:mpdecision:s0 tclass=capability

* In order to avoid another dac_override with access to
  /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
  thermal service nows runs with the system group id.
  This addressed the following denial.
type=1400 msg=audit(3008460.600:19): avc:  denied  { dac_override } for  pid=195 comm="thermal-engine-" capability=1  scontext=u:r:thermald:s0 tcontext=u:r:thermald:s0 tclass=capability

* Give the thermal service read access to the /dev/socket/mpdecision
  directory. This address the following denial.
type=1400 msg=audit(3007815.520:23): avc:  denied  { search } for  pid=262 comm="thermal-engine-" name="mpdecision" dev="tmpfs" ino=6071 scontext=u:r:thermald:s0 tcontext=u:object_r:mpdecision_socket:s0 tclass=dir

* Add new wpa rule to allow access to persist partition files.
type=1400 msg=audit(3090909.619:194): avc:  denied  { search } for  pid=851 comm="wpa_supplicant" name="/" dev="mmcblk0p16" ino=2 scon
text=u:r:wpa:s0 tcontext=u:object_r:persist_file:s0 tclass=dir
type=1400 msg=audit(3093618.959:200): avc:  denied  { search } for  pid=3062 comm="wpa_supplicant" name="wifi" dev="mmcblk0p16" ino=12 scontext=u:r:wpa:s0 tcontext=u:object_r:persist_wifi_file:s0 tclass=dir

Change-Id: Ied2293d9effb1b2d9e043e01c08b5e7be407c868
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
BoardConfig: enable QCOM AV Enhancements

Signed-off-by: Domenico Marino <johnlemon.lol@gmail.com>
sepolicy: make camera and mediaserver permissive

Signed-off-by: Domenico Marino <johnlemon.lol@gmail.com>