sepolicy: allow recovery read access to /data/media/ files and dirs

Change-Id: I41173d72e86f9cf4d79f7c46166eeb71dc19d2f4
Tweak shamu product makefiles

Change-Id: I95de0a13c2e3e09442636c8a8d6eac0c1a4288eb
Merge branch 'L5' of https://github.com/VanirAOSP/vendor_vanir into EXODUS