Merge "update sepolicy for gralloc HAL" into oc-dev