Merge "selinux rules for codec process" into nyc-dev