am: a8d9191f

Change-Id: I134a0d70c1075dee70991daa915a516bc21dab24

Finalize Wi-Fi RTT service name per API review.

Note: CL 1 of 2 - adding new entry here, will remove
old entry in next CL.

Bug: 65108607
Test: integration tests
Change-Id: I065ce9d570510180fa8c8f09e1025ac795706405

am: fd9f7de7

Change-Id: I1450316521d217109a84027cf4f760c90cf4812d

am: 70c21a62

Change-Id: I4acdfc65e2fdbefd0bdd2d9442ea087fc7d173b8

This reverts commit b40eb255.

Change-Id: I04d9e76152ed11ada4cabcc79bb4eec827f8abef

am: 2de29263

Change-Id: Iae8918d997d10f9a3a1b61fcffb9ed4e8a217368

Bug: 64131637
Test: Manual
Change-Id: I0170c5eb465aa663582e3974348380a8f0c9b27f

After offline discussions, we decided that this was the proper
exception to the neverallow rule.

Test: Built policy.

Change-Id: Ic1603bfdd803151ccfb79f90195b83b616acc873

am: 0eb0a7bb

Change-Id: I90b10b2ccaff3872675ef4dc24482a759fe4280c

This fixes failing vts drm tests

bug:67675811

Test:vts-tradefed run commandAndExit vts -m VtsHalDrmV1_0Target
Change-Id: I2f7e1c97e8c70fc312ca3c2c901f0a9607b05e83

am: 4dd97a0b

Change-Id: Ic44a73a977a05b5cbb886abc5576b045020655df

am: 41b8271f

Change-Id: I14694f97a0af2e642db1b69c3ea8776dc7b3d7c9

Test: Boot the device
Change-Id: Ia468941e78803edebe311c73f424a41ac1faeaee

zygote->webview_zygote.

Forgot to ammend local change.

Test: webview_zygote denials are gone.
Change-Id: I02869812feafd127b39e567c28e7278133770e97

am: 05916fca

Change-Id: I84abff9bd2e80f452eaeb4a65f81ac25b6e7df21

am: db689675

Change-Id: I0a21e2381ecc46d67fac8b7f3f20d8598fbcc6bb

Commit erroneously 55039509 removed init's read access to
/sys/devices/virtual/block/zram*. Restore access.

Test: cat /proc/meminfo
    ...
    SwapTotal:        524284 kB
    SwapFree:         524284 kB
    ...
Bug: 71510938

Change-Id: I20268168caa541a7dafa1e32339641095e1e524b

am: 756dd574

Change-Id: I747966d12d4f92b010a835f16c7309761ea4f16b

am: 08f92f9c

Change-Id: Ibf75df4bfde087c80b9135819edf319673103eb5

am: 254ad0da

Change-Id: I2cb5fe79f04ca72896ff313db44bd6778368053f

For consistency with zygote, allow webview_zygote to list directories
in /system.

Test: Boot Taimen. Verify webiew_zygote denials during boot.
Bug: 70857705
Change-Id: I27eb18c377a5240d7430abf301c1c3af61704d59

The system server is responsible for providing the network traffic
stats to Apps and services. Allow it to directly reading the eBPF maps
that stored these information can make the process of getting traffic
stats simplier.

Test: No selinux rule violation of system server reading netd bpf object
Bug: 30950746
Change-Id: I6d9438d1ed7c9bab45a708f5d2a85eb22f5e8170

Add the new classes for eBPF map and program to limit the access to eBPF
object. Add corresponding rules to allow netd module initialize bpf
programs and maps, use the program and read/wirte to eBPF maps.

Test: no bpf sepolicy violations when device boot
Change-Id: I63c35cd60f1972d4fb36ef2408da8d5f2246f7fd

Some necessary sepolicy rule changes for init process to create directory,
mount cgroupv2 module and mount bpf filesystem. Also allow netd to create
and pin bpf object as files and read it back from file under the
directory where bpf filesystem is mounted.

Test: bpf maps show up under /sys/fs/bpf/
Change-Id: I579d04f60d7e20bd800d970cd28cd39fda9d20a0

am: ff3b957e

Change-Id: I7889127ebe538d2aaf0db9b887c991e3976e842a

Bug: 63908748
Test: Able to boot
Change-Id: I14d8856d7aac7be9d1f26ecf5bfff69ea5ee9607

am: 2f39276e

Change-Id: If8e02a3397a2f345940960d6c408d75f9cd14d89

am: 8d07a8d5

Change-Id: Ic3ff38e6a2c29ff1ee829bf759d9b3bc406bb64a

Add policy for the perfprofd binder service.

For now, only allow su to talk to it.

Test: m
Change-Id: I690f75460bf513cb326314cce633fa25453515d6

am: 0b6856f5

Change-Id: I7a46caf78de021df995c974e607629d69536b025