am: 6a608735

Change-Id: I96266b36a134862775d06097563942ca028a2941

am: bad7f76a

Change-Id: Ib876d00a161c2846c1f0203b84fceda55fb0fb72

am: f304d5ea

Change-Id: Icd20ce23ead6768896dbc4c77af5c8bf128f6406

am: f016fc11

Change-Id: I17903332e79b259b88aa535520dc7c62dda92e7e

Merge "priv_app.te: Drop auditallow app_data_file:file execute" am: 0f804431 am: 2f2145a6 am: 9283dd46
am: 41f0902e

Change-Id: Ie11347d55fa81cb7acfaee7afb44a69694b121e9

am: 9283dd46

Change-Id: I0135b9632ed6ba1b6b5469b5efff26f103b072d4

am: 2f2145a6

Change-Id: Ibd5d40eb888f0e19dc072ebf867edad21c50fcf7

am: 0f804431

Change-Id: Iab40d4b9da214f1282ab83323aa11b40f0cccefc

Addresses the following denial:

avc: denied { ioctl } for comm="top" path="/dev/pts/0" dev="devpts"
ino=3 ioctlcmd=5402 scontext=u:r:shell:s0 tcontext=u:object_r:devpts:s0
tclass=chr_file permissive=0

Bug: 33073072
Bug: 7530569
Test: policy compiles.
Change-Id: If9178d29f2295be46bb118df00ebf73a6ebc9f81

am: ab0c626d

Change-Id: I09363c394769184b4c9eb756fd213eb443c4084a

am: d0b413fc

Change-Id: Ibf2cc46436c603be1f3d9b57f153456604bcd9d1

am: d542b600

Change-Id: Idc5134c506051553d1069cde3c7208020b4416f4

am: a040aa12

Change-Id: I773dd8516aaf8e8fdc2def5a03600840f96dbef3

This functionality is being used by priv_apps shipped as part of
Android. Don't drop execute_no_trans as we haven't seen any denials here
yet.

Addresses the following auditallow messages:

avc: granted { execute } for comm="GELServices-0"
path="/data/data/com.google.android.googlequicksearchbox/files/velour/dex_cache/Ji1opKyKASKEOKNQUu1QyWw_1.jar/Ji1opKyKASKEOKNQUu1QyWw_1.dex"
dev="dm-2" ino=1196939 scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:app_data_file:s0:c512,c768 tclass=file

avc: granted { execute } for comm="CTION_IDLE_MODE"
path="/data/data/com.google.android.gms/snet/dalvik-cache/snet.dex"
dev="dm-2" ino=1114262 scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:app_data_file:s0:c512,c768 tclass=file

avc: granted { execute } for comm="lowpool[3]"
path="/data/data/com.google.android.gms/files/libAppDataSearchExt_arm64_v8a.so"
dev="dm-2" ino=1688320 scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:app_data_file:s0:c512,c768 tclass=file

avc: granted { execute } for comm="Binder:9196_2"
path="/data/data/com.google.android.gms/app_dg_cache/1FECE961A655634046D6AB5E18FE6F74212FBEA6/lib/libdC14BB7282EA1.so"
dev="dm-2" ino=1893474 scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:app_data_file:s0:c512,c768 tclass=file

avc: granted { execute } for comm="Binder:13170_1"
path="/data/data/com.google.android.gms/app_fb/f.dex" dev="dm-2"
ino=1810720 scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:app_data_file:s0:c512,c768 tclass=file

Test: policy compiles.
Change-Id: I63358697b07c8f620b999e666791f4f385bab776

Bug: 33388095
Test: Builds and boots.
Change-Id: Ief9064a16fc733bed54eb76f509ff5aaf5db4baf

Merge "Allow webview_zygote to read/execute installed APKs." am: 23fdf03c am: 9e0873ec am: da1d724f
am: a924b8f6

Change-Id: I97c537064514db560f593cd7ff88aab6cd03c803

am: da1d724f

Change-Id: I2fa92c77859418e4fdb6dc1e2f966033567183a4

am: 9e0873ec

Change-Id: Ie6d65f6e47d6bbcdd780f0ed38b564c685b2577b

am: 23fdf03c

Change-Id: I7de68cddfaea7864a34628550bf111e1f1bc4b51

am: 960d1409

Change-Id: Icec0f1cdca81265dae4de961ed2bd36ed5a94580

am: 8720ce36

Change-Id: Ib55527c82e82f53965dcdc91119cd1c5749bff68

am: 28e13121

Change-Id: I5ea1ede807232abb6552b5e95ec118075fe244d5

am: cb4ecd26

Change-Id: I6581626ca79e39dfb530d6585d4dcb527e573447

am: 6ef8af2b

Change-Id: I7337ffcd32dec2501f3ac1664fc93a82473c8ef7

am: cb4ecd26

Change-Id: I05d77c227ee1292eeae86d431b4ed7f5d69845bf

am: 8a54bd7f

Change-Id: Idd2020ed762067eeaf61fcbd625ce38505583e17

am: 250495a4

Change-Id: Ieb3b86e38a72f6b83ecd39e99a463c9b86e70a9d

am: 87a56541

Change-Id: I56c57b4a2e2ef71dd2eceb58a78c4e7e7628da00

am: 3e6f1f86

Change-Id: I2e50b7fdccdcc3440431d0975d2a62524ada7926

am: 506c7c1b

Change-Id: I6747d2593374612e64f40774076d85cea14a211e

am: 6ea1ad51

Change-Id: I3f3a10f2870989f04f4f32d133bd4c23f48cea23

am: 2a0053b2

Change-Id: Iebb46067ae991a06b9502f57ec7252bc5e6c2aa9

Test: No media_rw_data_file related app denials
Change-Id: I1a977db09379f9a3e5bc52c597df12f52929ad19

am: 06752552

Change-Id: Iec4387eb0920009825e904fb6fd43f2f1095374e

am: d88c0d2b

Change-Id: I488235f7aaee696976ff75ba5f307a1123c34ada

am: c165b1a7

Change-Id: I24bff9b1ef62cb3f24e9f104c3458c7719e0ec85