domain: Create a dummy domain for qc's rmt and let it access /dev/mem

Old (pre-L) binaries will fail hard if unable to access mem. Create
a domain that rmt_storage can use to get those perms
Allow recovery to create device nodes and modify rootfs

tilapia's OTA code for updating the radio image needs to
create files on rootfs and create a character device in /dev.
Add an exception for recovery the the various neverallow rules
blocking this behavior.

Bug: 18281224
Change-Id: I5c57afe0a10b4598fea17f9c5c833bd39551907e
Netd: receive broadcast message from hostapd

allow netd to create dir /data/misc/wifi/sockets
allow netd to create sockets wpa_ctrl_*
allow netd to access dir /data/misc/dhcp

Change-Id: Ibd48cd40a61f8e846ae54400dd628eb3287b93bb
CRs-Fixed: 685913
property: Make the adb tcp port property a wildcard

This allows us to override the context for this property in child nodes
of the MAC hierarchy.

Change-Id: Icfe5ce121358cc818179baf27149428997d97b41
sepolicy: allow system apps to access ASEC

Required for Settings to show name/icon of apps on sd card
(permission copied from untrusted_app)

Also removed duplicate permission (from domain) in untrusted_app

Change-Id: Ib2b3bee4dfb54ad5e45b392fd9bfd65add4a00bf
sepolicy: New type sdcard_posix for labeled filesystems

 * Need this because sdcard_external is an alias for vfat

Change-Id: I804ebb0fcf643d603b1a02ee7a54e6d5b6b46294
init: Fix datadata context migration

PackageManager/installd deal with the app data relabeling, but not
the dirs where the data is stored. Let init perform the relabel for
/data/(user|data)

Change-Id: I179df40deb62dc811f697cea65127522072be6eb
Allow vold to mount ext4 sdcard

* Originally in 9a19f575a4c991bf2d7bc2f8f980909910ee4cce vendor/cm

Change-Id: Id95e48d2380aa7a6727be765e3a52ee49d814bcb