am: fb5495e1

Change-Id: I02acb1fbb2cfaec2ce86ef1b485c0f97d1cf26dd

am: 2b2c74f8

Change-Id: I00841b24d684efe788e7794038f98da55d4c75e9

am: cb7a9c1d

Change-Id: Ibf1c84344b132bcc26fa71eeda93065d78f08948

am: d5b6043f

Change-Id: I95dfe4238c5029a54fcabe3345441fddbb246c5e

As of https://android-review.googlesource.com/324092, ephemeral_app is
now an appdomain, so places where both appdomain and ephemeral_app are
granted the same set of rules can be deleted.

Test: policy compiles.
Change-Id: Ideee710ea47af7303e5eb3af1331653afa698415

am: 000a7b44

Change-Id: I2622546e00f914a5f43ef4dfa490f1f65a1df584

am: 47ab9eaf

Change-Id: I4cda4881143e2bcdc49e9e4c8d5ae4775adf0252

wificond is a system_server service used by wifi, wifi doesnt start now

This reverts commit b68a0149.

Change-Id: If958c852e5d8adf8e8d82346554d2d6b3e8306c9

am: bc9c044a

Change-Id: I0d46464c35230d078c84b884c21c4caf7fe45535

am: 7b8c0020

Change-Id: Ic2c4e8329045e1e05274ce7b03af06b7422ff2cb

/sys/class/leds is the standard location for linux files dealing with
leds, however the exact contents of this directory is non-standard
(hence the need for a hal).

Bug: 32022100
Test: compiles and works for the subset of common files
Change-Id: I7571d7267d5ed531c4cf95599d5f2acc22287ef4

am: e7739a95

Change-Id: I811738f169e251a14b7e491cd7c6a3bd12da1f3c

am: 899287a5

Change-Id: I4ec7235b3c0efcc62d3eca99064a21b7acb76c16

am: 2dcb16e6

Change-Id: I218dacfbe93f77345bfcfd0909c6831fb1549565

am: b7f86a72

Change-Id: I921ded110052555f9209eadae4f1b42090c062b7

am: 2be495aa

Change-Id: Id1aed580f4db97873848cde68cbd72bb85c444b5

am: 2796009e

Change-Id: I93b92d5a95264b58f7f335962f9d74e6e77a27f3

wificond_service is not a system_server service, so drop the
typeattribute.

Test: compile
Change-Id: Ic212dd2c8bc897fbdc13ca33a9864ac8d4e68732
Signed-off-by: William Roberts <william.c.roberts@intel.com>

am: 44b18d64

Change-Id: I4c2a2f05a6379dee0f2637beb4e7d117675114ff

This fixes a bug introduced in the HIDL port where fingerprint no
longer notifies keystore of authentications.

Test: keyguard, FingerprintDialog

Fixes bug 34200870

Change-Id: I8b1aef9469ff4f4218573a6cde4c3a151512c226

am: 51c00faf

Change-Id: Ib179a0a42f5c2468c8a44cb80ccc35612b23c693

Ephemeral apps cannot open files from external storage, but can be given
access to files via the file picker.

Test: ACTION_OPEN_DOCUMENTS from an ephemeral app returns a readable fd.
Change-Id: Ie21b64a9633eff258be254b9cd86f282db1509e8

am: 84da43c9

Change-Id: Id06a13635915f9d47dfe851e990de683deaf7ed1

am: 0fad70d1

Change-Id: I396ca0fd6a6dd9f364c9125f7ff5e8e76edb77f8

am: cde575d2

Change-Id: I9e787a2e5f852e67f708dc9c0f0ca780c88af889

am: a06807fd

Change-Id: I559d209a89833d7c2fc9bca29e6036f5c2bc44a2

am: fcd801ca

Change-Id: Ic460877764352586ced6825b3f7f615ae5317592

am: 5c566d1a

Change-Id: If930652542ea153a1e315cb737c92c650ccfc31f

am: 2448baed

Change-Id: I78f6c269db92324e86b885b80f531b2681736f69

Ephemeral apps are still apps with very similar capabilities, it makes
more sense to have them under appdomain and benefit from the shared
state (and all the neverallow rules) than to try and dupplicate them and
keep them in sync.

This is an initial move, there are parts of ephemeral_app that still
need to be locked down further and some parts of appdomain that should
be pushed down into the various app domains.

Test: Builds, ephemeral apps work without denials.
Change-Id: I1526b2c2aa783a91fbf6543ac7f6d0d9906d70af

am: 510ffa3d

Change-Id: Ia0b06fbfede00514953239b881fd7573918f8ebc