import sepolicy from cyanogenmod

Change-Id: I1cb2089f641995a8ef532c00ee64cc83f2fcfc6d