Revert "Revert "ghost: Add device-specific SELinux policies""

This reverts commit 3021e49bbbbb30c6c0ed97a39f518e3cfd42b624.
Revert "Revert "Revert "ghost: Set SELinux permissive"""

This reverts commit 5a376a2958cbfb29fbbe36dfceeaab101cc25937.