am: 7a31444a

Change-Id: I71e33a0923e9f17c35b91172c81612d420a10c0b

am: 05121724

Change-Id: I6c8f336aed4833d6c9f9765a8768bba4b496a40e

am: e77d9eea

Change-Id: I3e4c83d962b1a4c9fbfba83ffd0df5fc8d59c8fc

Owners are selected from top CL approvals or owners.
They will be suggested to review/approve future CLs.

Test: build/make/tools/checkowners.py -c -v OWNERS
Change-Id: I3d7f4c06209c22dea0d824429d68997f7179985f

am: 8714f9e0

Change-Id: I669acdf32d54f9456268d3bfe43e1a114f3b96fd

am: f378708c

Change-Id: Ia51ea7ccf0974ed1bacfea950571c6e10ed2b1bf

am: a3a8a3a0

Change-Id: I63084a04ffe9d88aa6aadf5fbb9b7baa98ff3e35

am: 17885f14

Change-Id: I46546950720c4d3fa907f32a2af9ab42caa448ba

Bug: http://b/62297059
Test: mma
Merged-In: Ibcd93e5554a9c2dd75fbfb42294fbc9b96ebc8cc
Change-Id: Ibcd93e5554a9c2dd75fbfb42294fbc9b96ebc8cc
(cherry picked from commit 17885f14)

Bug: http://b/62297059
Test: mma
Change-Id: Ibcd93e5554a9c2dd75fbfb42294fbc9b96ebc8cc

am: 60e4fd9d

Change-Id: I1628907aeb743c3cb0938e7993237206523fdeb5

am: cd267450

Change-Id: I20479829d542df345275c0c2b4512788a30fba4c

Test: I solemnly swear I tested this conflict resolution.
Change-Id: Icadf7c72ad173c134d3e95bb5b93c2b54b1b703e

am: fc1d8d99

Change-Id: Id41f7097fd0a48739293d4f8f06f296d0f189684

am: b0d59450

Change-Id: If85613b84aecf43b0519bb933d925eb1829e3d5e

am: 2ff75628

Change-Id: I66cf4111e4d17e698cea7c8dc44d3294ce20a4ac

am: 34b4b737

Change-Id: If25147ce3439abd0ab4a3abc1e330b373e43d9cb

Modprobe requires this permission or the following denial will
prevent loading of signed kernel modules:

audit: type=1400 audit(27331649.656:4): avc:  denied  { search } for
pid=448 comm="modprobe" scontext=u:r:modprobe:s0 tcontext=u:r:kernel:s0
tclass=key permissive=0

Bug: 62256697
Test: Verified signed module loading on sailfish.
Change-Id: Idde41d1ab58e760398190d6686665a252f1823bb

Add policy changes to enable a new service. The service
is currently switched off in config, but this change is
needed before it could be enabled.

Bug: 31008728
Test: make droid
Merged-In: I29c4509304978afb2187fe2e7f401144c6c3b4c6
Change-Id: I29c4509304978afb2187fe2e7f401144c6c3b4c6

This is sometimes used for communication with the bootloader.

Bug: 62052545
Test: Build
Change-Id: I3ae37793407719e55ab0830129aa569c9018f7da

Bug: 38232801
Test: Build

Change-Id: Iccc16430e7502bb317f95bb2a5e2f021d8239a00

Bug: 38233550
Test: Build
Change-Id: I7c2105d5f215a60a611110640afff25fc3403559

am: b25e8823

Change-Id: I778011a48800ace4d865813b148efcdd88d166bb

am: 32c7000e

Change-Id: I57d3af7a930f77be74feba88d9875c9b5b90ab7c

am: a34781ae

Change-Id: Ic4103ff418e69f000198bb588f0cfccc578ba324

tombstoned allows dumpstate to install "intercepts" to java trace
requests for a given process. When an "intercept" is installed, all
trace output is redirected to a pipe provided by dumpstate instead
of the default location (usually in /data/anr or /data/tombstone).

Note that these processes are already granted "write" and "getattr"
on dumpstate:fifo_file in order to communicate with dumpstate; this
change adds "append" to the existing set of permissions.

Bug: 32064548
Test: manual
Change-Id: Iccbd78c59071252fef318589f3e55ece51a3c64c

am: 51a01817  -s ours

Change-Id: I4ecaa2194614148b4b50245e6250bdde02206160

Applications connect to tombstoned via a unix domain socket and request
an open FD to which they can write their traces. This socket has a new
label (tombstoned_java_trace_socket) and appdomain and system_server are
given permissions to connect and write to it.

Apps no longer need permissions to open files under /data/anr/ and
these permissions will be withdrawn in a future change.

Bug: 32064548
Test: Manual

(cherry picked from commit a8832dabc7f3b7b2381760d2b95f81abf78db709)

(cherry picked from commit 11bfcc1e)

Change-Id: Icc60d227331c8eee70a9389ff1e7e78772f37e6f

am: 5e8fe834

Change-Id: Ibfe717b42fc26da2ec7876143b8cf0445a20eaec

am: e628cb5b

Change-Id: If2ce6fbf2b897d58da78430a7bae0fd6fb6e5a49

Applications connect to tombstoned via a unix domain socket and request
an open FD to which they can write their traces. This socket has a new
label (tombstoned_java_trace_socket) and appdomain and system_server are
given permissions to connect and write to it.

Apps no longer need permissions to open files under /data/anr/ and
these permissions will be withdrawn in a future change.

Bug: 32064548
Test: Manual

Merged-In: I70a3e6e230268d12b454e849fa88418082269c4f
Change-Id: Ib4b73fc130f4993c44d96c8d68f61b6d9bb2c7d5

am: d2b3a454

Change-Id: I1ba8e73e1a004b654bc32dd6520b1e41ec3bc9cf

Bug: 62102558
Test: see b/62102558
Change-Id: If80d1270bcf6835e6d1a78e2176c3e139cebd174