sepolicy: Put theme service in its own context

Allow the theme manager and its data to be sandboxed in
its own context

Change-Id: I7898663d1c196bfe04fa4c539d20191a43fde284
diff --git a/sepolicy/mac_permissions.xml b/sepolicy/mac_permissions.xml
index 184e356..f70b722 100644
--- a/sepolicy/mac_permissions.xml
+++ b/sepolicy/mac_permissions.xml
@@ -21,4 +21,11 @@
       <seinfo value="cmupdater" />
     </package>
   </signer>
+
+  <!-- ThemeManagerService -->
+  <signer signature="@RELEASE" >
+    <package name="org.cyanogenmod.themeservice" >
+      <seinfo value="themeservice" />
+    </package>
+  </signer>
 </policy>