kitakami-common: sepolicy: Address camera and secd denials

allow qcamerasvr camera_data_file:dir { add_name remove_name write };

allow qcamerasvr camera_data_file:sock_file { create unlink };

allow qcamerasvr hal_camera_default:fd use;

allow qcamerasvr ion_device:chr_file { open read };

allow qcamerasvr ion_device:chr_file { open read ioctl };

allow qcamerasvr mediaserver:fd use;

allow qcamerasvr sysfs:file { open read write };

allow qcamerasvr video_device:chr_file { ioctl open read write };

allow qcamerasvr camera_socket:sock_file unlink;

allow qcamerasvr sysfs_graphics:file { open read };

allow qcamerasvr ta_data_file:dir search;

allow qcamerasvr ion_device:chr_file ioctl;

allow qcamerasvr secd_exec:file { getattr read };

allow qcamerasvr vendor_camera_data_file:dir { add_name remove_name write };

allow qcamerasvr vendor_camera_data_file:sock_file { create unlink };

allow shell wififtmd_prop:file { getattr open };

allow shell wigig_prop:file { getattr open };

allow shell xlat_prop:file { getattr open };

allow shell secd_exec:file { getattr read };