Create touch_fw_update SELinux domain

For the touch_fw_update service, stop using the init_shell domain.
The use of init_shell is discouraged, as it tends to get
entered into inappropriately, and it contains a random collection of
permissions. This is the first step in deleting init_shell (b/18062250).

Move the code in init.grouper.rc into a proper shell script,
and create an SELinux domain for this shell script.

Remove the sysfs bug workaround added in 7b97740f1d9d3bd4852e370e4c59f748b2f24360.
All of our kernels have been updated with this bug fix, so
we don't need the workaround anymore.

Bug: 18062250
Change-Id: Ib1a72f523d68758531a955355e1cd1eb2cd12f56
7 files changed