Merge "Make kernel / init enforcing"

init.te

 # init switches to init domain (via init.rc).
 type init, domain;
-permissive init;
 # init is unconfined.
 unconfined_domain(init)
 tmpfs_domain(init)

kernel.te

 # Life begins with the kernel.
 type kernel, domain;
-permissive kernel;
 # The kernel is unconfined.
 unconfined_domain(kernel)
 relabelto_domain(kernel)