am: 03f36972

Change-Id: Ib3107f429c17fd4bf487a8a10849bee451d68424

am: 44e9d68b

Change-Id: I268bb425815c3b30e1030ce40907d27ee053ab27

am: b4f88cd6

Change-Id: I81484e7f4b130b0ddfc31ea3404d40a7db7cd94e

Reverting this commit to fix CTS tests in oc-dr.
This reverts commit 718e0852.

Test: Tested lowmemorykiller tracing removed via traceur.
Bug: 62908858
Merged-In: Ifc1c6ac634b94e060ed1f311049bd37f6fcc8313

Change-Id: Ie462decf32578bbe74a9ec9bdb8bb4ae1b87da29

am: 48f00f16

Change-Id: I6c44c84623f061c9ccae6d67dfa7aeb09a359d62

am: 9d6f2c42

Change-Id: Ia837b29db98c2bc8bc76bdf658d83a8b01bf0d9c

am: 57247153

Change-Id: Iadf138fc64bad940308cb01b3a3b8159b8b33704

am: 9fbc408f

Change-Id: I26ed5e7acdf5d57374a9b89adf680f65e2689be6

am: 90f46dd9

Change-Id: I8ce1862e574d6890bf2b4eb0d1e2e8e38f5bb0dd

am: 50992311

Change-Id: Ia24ef33e8cdbee7c3336fda2a5c0ec0e4ca751f0

am: 770214ab

Change-Id: I253dad49662831625a17162b18f013e0b4a87af4

Kernel commit f9df6458218f4fe ("selinux: export validatetrans
decisions") introduced a /sys/fs/selinux/validatetrans pseudo file
for use by userspace file system servers and defined a new validatetrans
permission to control its use.

Define the new permission in the Android SELinux policy.
This change only defines the new permission; it does not allow it
to any domains by default.

This avoids a kernel message warning about the undefined permission on
the policy load, ala:
SELinux:  Permission validate_trans in class security not defined in policy.

Test: Policy builds

Change-Id: Ib922a83b7d8f94905207663a72f7a1bc3db8d2c2
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

Allow wrapped app to send pid back to zygote.

(cherry picked from commit ee694980)

Bug: 63566721
Bug: 63635227
Test: lunch angler-userdebug && m
Test: lunch angler-user && m
Test: lunch angler-user && m && fastboot flashall && m cts && cts-tradefed run commandAndExit cts-dev -m CtsWrapWrapDebugTestCases
Change-Id: Ie1b41c3eb124aa5ee321c124d0121a0e965f0f0e

Merge "Revert "Temporarily revert the SELinux policy for persist.netd.stable_secret."" am: 580a0f2b am: 34bc175d
am: ebd400d3

Change-Id: I496c06cd4b4b151dd18bdadd1ef2171620e9f0d0

Merge "Revert "Temporarily revert the SELinux policy for persist.netd.stable_secret."" am: 580a0f2b
am: 34bc175d

Change-Id: Ie164d3741e719aa33081a57a9036b148ae84ae26

am: 580a0f2b

Change-Id: Ibc29f16dac70c4c44ea4b1bfff5afcf513d2dbfa

This change must only be submitted when device-specific policies
have been reverted.

This reverts commit 07e631d2.

Bug: 17613910
Test: builds
Change-Id: Ie33e293107bf1eba2498f2422d941544c76b8cad
Merged-In: I356c39a5dc955b3d7c28d8c7baf2887a17beb272

am: c6e49624

Change-Id: Iaa0ac3322117a02e524d7c1b3c08713d8a4d7dd5

am: 22a8918b

Change-Id: I011d5d49fcc2329e76fad7a3ae105e3839d52156

am: ee694980

Change-Id: Ic572585b380405f135646731f9fc749fcee86a3b

Remove RILD accessing system data file as its not allowed
Move RILD accessing radio data file to vendor policy

Test: Verified radio works fine and no denials

Bug: 36740743
Change-Id: I66a7cf98738fbfe9512925d3dec0c1eb09a44185

Allow wrapped app to send pid back to zygote.

Bug: 63566721
Bug: 63635227
Test: lunch angler-userdebug && m
Test: lunch angler-user && m
Test: lunch angler-user && m && fastboot flashall && m cts && cts-tradefed run commandAndExit cts-dev -m CtsWrapWrapDebugTestCases
Change-Id: Ie1b41c3eb124aa5ee321c124d0121a0e965f0f0e

am: 142f5dfe

Change-Id: I2b81ec72115592cea4987758283aa39aec919941

am: d7da92a1

Change-Id: I46508e3ec85740b4a25c798fab63ddf6e7832afa

am: 676ac366

Change-Id: I6ed888bc1a37e14d4d05dd904cab8ccd159225d9

avc: denied { search } for name="tmp" dev="sda13" ino=1867778
scontext=u:r:isolated_app:s0:c512,c768
tcontext=u:object_r:shell_data_file:s0 tclass=dir

avc: denied { getattr } for path="/mnt/expand" dev="tmpfs" ino=9850
scontext=u:r:webview_zygote:s0 tcontext=u:object_r:mnt_expand_file:s0
tclass=dir

Bug: 63631799
Test: build. Denial no longer appears in the logs
Change-Id: Ie8a297c73b0f0e9008a7bf24438ef5354bf893df

Test: tested taking bugreport, sensor HAL traces show up in
      "VM TRACES JUST NOW"
Test: tested trigger ANR by `adb shell am hang --allow-restart`,
      sensor HAL traces shows up in /data/anr/traces.txt
Bug: 63096400
Change-Id: I1d012b9d9810f987be7aaf9d68abfd9c3184ac5c

Change-Id: I5360777b81f561c6b062d11c55fbb8491a7845ec
Test: build

Logs indicate that these rules have already been moved to the
domains that need them.

Bug: 28760354
Test: build
Merged-In: I588a1e7ea7ef984907b79a5a391efb2dcd6e6431
Change-Id: I588a1e7ea7ef984907b79a5a391efb2dcd6e6431

am: 43881923

Change-Id: Idef73c24efc037903f6c93bf28f560c0960e0d67

am: a987158d

Change-Id: Ibd3d41c2c33c43fe18e89ca91639e8a4227fdc2e

am: 90d2772a

Change-Id: I354fac8e2de0f7c3d09341d291b7989dad1e0726

am: f6be4b66

Change-Id: I75c575577e7a7c99c140b092d3b490bd086de2db