domain: Create a dummy domain for qc's rmt and let it access /dev/mem

Old (pre-L) binaries will fail hard if unable to access mem. Create
a domain that rmt_storage can use to get those perms
Allow recovery to create device nodes and modify rootfs

tilapia's OTA code for updating the radio image needs to
create files on rootfs and create a character device in /dev.
Add an exception for recovery the the various neverallow rules
blocking this behavior.

Bug: 18281224
Change-Id: I5c57afe0a10b4598fea17f9c5c833bd39551907e
Netd: receive broadcast message from hostapd

allow netd to create dir /data/misc/wifi/sockets
allow netd to create sockets wpa_ctrl_*
allow netd to access dir /data/misc/dhcp

Change-Id: Ibd48cd40a61f8e846ae54400dd628eb3287b93bb
CRs-Fixed: 685913
Merge tag 'android-5.0.0_r5' into HEAD

Android 5.0.0 release 5
Sepolicy: Add Profile service as system service.

Change-Id: Iceb95f23e8f422c604dc75768319cb769df54ae2
AICP sepolicy hacks

Change-Id: If898665958807d5cf81968f793b1278b7bae907d