Run the console service shell in the shell domain.

This allows it to be permissive in userdebug/eng builds
but confined/enforcing in user builds.

Change-Id: Ie322eaa0acdbefea2de4e71ae386778c929d042b
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/rootdir/init.rc b/rootdir/init.rc
index 9706c89..56e0d92 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -431,6 +431,7 @@
     disabled
     user shell
     group log
+    seclabel u:r:shell:s0
 
 on property:ro.debuggable=1
     start console