sepolicy: Restrict diag access available to domains

Current diag access is overly permissive. Restrict diag access
to a whilelist of all domains.

CRs-Fixed: 1052935
Change-Id: I7713f18a10508ef297e2742969dc5f9064cf9b50
31 files changed