ghost: Add device-specific SELinux policies

Change-Id: Ic368cecd7e95c61c42ed290b5f47d3e845d50359
Revert "ghost: Set SELinux permissive"

This reverts commit f92c087fedcf99ede1443d66d560365935d6b395.

Change-Id: I3809c631e1d536347acf0021e78020a0e4317226
Merge branch 'remote' into mkl