sepolicy: mount firmware partitions with firmware_file context

* we don't need to give ueventd access across the entire vfat context

Change-Id: Idf1e24b7b90fd439d1d3ee2cd839c43078f026c7
a5: update hardware keys overlay

Add volume rocker to device keys.

Change-Id: Ifc12387a18de9f476d3ea5cab3ea7812bfab77f4
overlay: use config-based tcp buffer sizes

Change-Id: I8b1fa9946402f6389001aafa231cc7fc44a64138
sepolicy: add some more policies

* more access to kcal and vibe devices
* allow kernel to unmount labeledfs (for new kernel)
* allow system_server access to time_daemon

Change-Id: I113c14014dde97c7f3c65c8afa60d979b02fcf98
a5: Add more SELinux policies

Change-Id: I17ab585c89fd17177e6319757dbc1030191a73a4