This reverts commit 7e577318.

When adopting SD cards, vold partitions and formats those devices;
this had been working fine with the older make_ext4fs utility, but
newer devices are switching over to mke2fs, which has a different
SELinux label.

avc: denied { execute } for name="mke2fs" dev="dm-0" ino=456 scontext=u:r:vold:s0 tcontext=u:object_r:e2fs_exec:s0 tclass=file permissive=1
avc: denied { read open } for path="/system/bin/mke2fs" dev="dm-0" ino=456 scontext=u:r:vold:s0 tcontext=u:object_r:e2fs_exec:s0 tclass=file permissive=1
avc: denied { execute_no_trans } for path="/system/bin/mke2fs" dev="dm-0" ino=456 scontext=u:r:vold:s0 tcontext=u:object_r:e2fs_exec:s0 tclass=file permissive=1
avc: denied { getattr } for path="/system/bin/mke2fs" dev="dm-0" ino=456 scontext=u:r:vold:s0 tcontext=u:object_r:e2fs_exec:s0 tclass=file permissive=1

Test: cts-tradefed run commandAndExit cts-dev --abi armeabi-v7a -m CtsAppSecurityHostTestCases -t android.appsecurity.cts.AdoptableHostTest
Bug: 36757864, 37436961
Change-Id: Ifb96dfca076ea58650eb32f89e850f20ae2ac102

am: 0d8b9830

Change-Id: I55cbe59bf1be98555ea2a13e42c949477761e1da

am: 25578a30

Change-Id: I1d49bdbd662e4037843a2c6af4954a4a926c8543

avc:  denied  { find } for
interface=android.hardware.configstore::ISurfaceFlingerConfigs
scontext=u:r:system_server:s0
tcontext=u:object_r:hal_configstore_ISurfaceFlingerConfigs:s0
tclass=hwservice_manager permissive=0

Bug: 35197529
Test: Device boots without this denial
Change-Id: Ia43bc5879e03a1f2056e373b17cc6533636f98b1

am: 3f7f66b0

Change-Id: I3fc0cac7fdeab40bfa61f465a6d01d1d8c0c8d01

Bug: 37896931
Test: none, just prebuilt update.
Change-Id: I55b5179f98703026699a59cce4b2e1afb166fd1d

am: 4e65fed1

Change-Id: I9fd1ef32fde011d00e96555501f7665baf99fc26

am: f26d79c5

Change-Id: I0c1a79082955faeebe8cf70bb408928479117aad

am: b9bba83a

Change-Id: I2fb029b770d53bacbe8dd11a69cee5e70b6ef2e9

A previous commit reverted us back to using file_contexts
instead of genfs_contexts but did not remove the new
genfs_contexts rules, which caused this problem.

Bug: 62901680
Test: Verified that the errors do not apepar and that wifi
and traceur work.

Change-Id: Ic0078dc3a2a9d3d35a10599239fdf9fa478f1e2b

Merge "Add sepolicy for hal_wifi to access /proc/modules" am: 6acd70b9 am: ded0b58d am: 9d86e622
am: b9621bba

Change-Id: I001be0f05e59e55dcedb159ec86a5bf386fa89c7

am: 9d86e622

Change-Id: Ib83f52f4dae096d42dedf17898cf20d8c3923f2e

am: ded0b58d

Change-Id: I574e60486bb12214e33a8e9aabf7794d4ebc0b1a

am: 6acd70b9

Change-Id: Ia4a4ffdf43cb1641785e18f9aad7ca96b5d45ab9

Bug: b/36863239
Test: manual
Change-Id: I7e929926efbb1570ea9723ef3810a511c71dc11a

Merge "Revert "Annotate rild with socket_between_core_and_vendor_violators"" into oc-dev am: 0e0ed156 am: 65ffb065
am: bc6271bc

Change-Id: I2915ce7ffa3f11d07c26a32b2d9b2d463a3c21f4

Merge "Revert "Annotate rild with socket_between_core_and_vendor_violators"" into oc-dev am: 0e0ed156 am: ed27bec5
am: 9f5801de

Change-Id: I5861f5464762ddea8c6a39cb3968d73017d9767d

Merge "Revert "Annotate rild with socket_between_core_and_vendor_violators"" into oc-dev am: 0e0ed156
am: 65ffb065

Change-Id: I4b3f0207400200d19f8e055ec35d518f0951d235

Merge "Revert "Annotate rild with socket_between_core_and_vendor_violators"" into oc-dev am: 0e0ed156
am: ed27bec5

Change-Id: Idac884677a3304144801a4929651c1ba1199a8b8

am: 0e0ed156

Change-Id: I8ec0c46355507e8c1a7d10c53805eb350ebbe6a5

am: 0e0ed156

Change-Id: Ic73d84dacc95d5b902dc6c9530b98e53d71574f1

This adds parellel rules to the ones added for media_rw_data_file
to allow apps to access vfat under sdcardfs. This should be reverted
if sdcardfs is modified to alter the secontext it used for access to
the lower filesystem

Change-Id: Idb123206ed2fac3ead88b0c1ed0b66952597ac65
Bug: 62584229
Test: Run android.appsecurity.cts.ExternalStorageHostTest with
      an external card formated as vfat
Signed-off-by: Daniel Rosenberg <drosen@google.com>

This reverts commit 3e307a4d.

Test: Builds - neverallow change only.
Bug: 62806062
Change-Id: Id3aa1b425cf48fc8586890c9850a74594584922d

Merge "Exempt tetheroffload hal from network socket restrictions" into oc-dev am: 6351c374 am: 319d7099
am: b24567f4

Change-Id: Ib51077433505dfb09c9a4519235ab3b51f22d149

Merge "Exempt tetheroffload hal from network socket restrictions" into oc-dev am: 6351c374 am: d9301ac6
am: aae5c4c8

Change-Id: Id94e113b5a5621b39420294eec1e7fd9e1bc1c42

am: 319d7099

Change-Id: Ifcb3c7111dbb840041d1244caa6afebfbeb1cde7

am: d9301ac6

Change-Id: I4b272a59a7e48e1f0f15ddd1acb7e8f6b836ca40

am: 6351c374

Change-Id: I6e661aa37702c36e9003dcf41dbed4b754122c87

am: 6351c374

Change-Id: I16cbe7b654532367829a0df2dcfa929c38e547fd