Allow recovery to create device nodes and modify rootfs

tilapia's OTA code for updating the radio image needs to
create files on rootfs and create a character device in /dev.
Add an exception for recovery the the various neverallow rules
blocking this behavior.

Bug: 18281224
Change-Id: I5c57afe0a10b4598fea17f9c5c833bd39551907e
Netd: receive broadcast message from hostapd

allow netd to create dir /data/misc/wifi/sockets
allow netd to create sockets wpa_ctrl_*
allow netd to access dir /data/misc/dhcp

Change-Id: Ibd48cd40a61f8e846ae54400dd628eb3287b93bb
CRs-Fixed: 685913
Merge tag 'android-5.0.0_r5' into HEAD

Android 5.0.0 release 5
Sepolicy: Add Profile service as system service.

Change-Id: Iceb95f23e8f422c604dc75768319cb769df54ae2