fetch from cm borrowed sepolicy

Change-Id: I7eb23645ba5269fd2a0c6661ba4ae780b24a36de
kernelbranch

Change-Id: I4be8caecab4f5d6f97452a8edef00331429a6508