Union sepolicy within TWRP to make SELinux permissive

This patch set should make it easier to build TWRP in non-Omni
trees as it allows TWRP to modify the sepolicy instead of having
to merge a patch in external/sepolicy to meet TWRP's needs.

Change-Id: I73205343556abb0852ff4c5f8cbf293d840b95d9

Android.mk

@@ -17,15 +17,20 @@ LOCAL_PATH := $(call my-dir)
 ifdef project-path-for
     ifeq ($(LOCAL_PATH),$(call project-path-for,recovery))
         PROJECT_PATH_AGREES := true
+        BOARD_SEPOLICY_DIRS += bootable/recovery-twrp/sepolicy
     endif
 else
     ifeq ($(LOCAL_PATH),bootable/recovery)
         PROJECT_PATH_AGREES := true
+        BOARD_SEPOLICY_DIRS += bootable/recovery/sepolicy
     endif
 endif
 
 ifeq ($(PROJECT_PATH_AGREES),true)
 
+# Make recovery domain permissive for TWRP
+BOARD_SEPOLICY_UNION += twrp.te
+
 include $(CLEAR_VARS)
 
 TWRES_PATH := "/twres/"

sepolicy/twrp.te

@@ -0,0 +1 @@
+permissive recovery;