Vendor-specific app domains depend on the rules in app.te so they
must reside in public policy.

Bug: 70517907
Test: build
Change-Id: If45557a5732a06f78c752779a8182e053beb25a2

am: 02ca42e1

Change-Id: Ib26d526c4de4c80624c1c6d81b5f0952d34b9dae

am: 744e67d7

Change-Id: I040ae4aa03ecc6052f7aeba21fbcfb0e6e35859b

am: d496ea7a

Change-Id: Ib6adf4bc2c608c86eebb5a174c91b4955c4d409c

This reverts commit 5744cbdf.

Reason for revert: aosp_dragon-userdebug build broken

Change-Id: I5f8180273c32119ae9839f31610bbca37cd05c65

am: 3d444093

Change-Id: I3a9fcc11509f6814ca594a1d619b291ed89a95fc

am: da67945d

Change-Id: I641db56b690577dcc4b750fe970019f9730d243a

am: 5744cbdf

Change-Id: I43913ca176e7a9ca049da643a95daff26f1ce916

Test: manual testing conducted see if it interfere's with AOSP

Change-Id: If47a663557b2ebf825fc082edb838ae085ec66b3

Merge "/odm is another vendor partition that can be customied by ODMs" am: 5872e84f am: acc88216
am: a212c863

Change-Id: I3e18f18d49133e4fdaf1f266f905620c77eacaf8

am: acc88216

Change-Id: Ia130d8211d9e0b849d5bef6c14a9dc5ecdc0f4ac

am: 5872e84f

Change-Id: Ice57a32ba00d99b74ed260706eee7dadae56e91a

Many processes including third party apps are expected to
access /proc/net/xt_qtaguid/stats. Give this file a new label
to avoid spamming the logs and temporarily grant read access to
all processes.

Read-only permission is adequate for all processes based on unix
permissions.
sailfish:/ # ls -laZ /proc/net/xt_qtaguid/stats
-r--r--r--  1 root net_bw_stats u:object_r:proc_net_xt_qtaguid_stats:s0 stats

Bug: 9496886
Bug: 68016944
Bug: 70722355
Test: Build/flash Sailfish. Browse in Chrome and watch videos in youtube.
    No "denied" or "granted" selinux messages observed in the logs.

Change-Id: I29f1ee806c8149988b9b93a950790d14754927ef

Since /odm is an extension of /vendor, libs in /odm should be treated
just like the ones in /vendor.

Bug: 67890517
Test: none as we don't yet have /odm partition.
Change-Id: I5232baef769c7fa8c7641b462cfa1d7537d3cfdf

am: 3337c82e

Change-Id: Id7dba03c422e4f9a2d094c7b26a773ababe2ab47

am: 5b17322a

Change-Id: I6e4c79d36c6b3ed4f734c7a9d6fd24d3031d3ae6

am: 40ed4283

Change-Id: I21488f5a1d0ef9035a3ae165ca790ad18d1b354f

am: c456286e

Change-Id: I73b279fa3f57c321ed39d4b494e413fe2dda900b

am: c878b4c5

Change-Id: I0781ab5eaf7aec47a8657e1c6ef10080c3294463

am: 8b5433a9

Change-Id: I7cf94fdd9aa130b1a97f56d4a97852eae79fa8c7

Allow init to create a serialized property_info file and allow all
processes to read it.

Bug: 36001741
Test: boot bullhead, walleye using property_info

Change-Id: Ie51d4c0f0221b128dd087029c811fda15b4d7093

am: 3107b532

Change-Id: I0ead6aa1ad9faef9034c709b39b739ff7361b888

am: 049bf53a

Change-Id: I1dabdfe296398c03e808bbaf997425def1c6af95

am: b10d2964

Change-Id: I07d6bdf0cf606b2ec56196e129a8340207d5d08b

am: cd069684

Change-Id: Ib53a57006c73d54b1c62c18129aba5f67710bf2a

am: 1fc08a29

Change-Id: If06792db331fecabaaa3de4b77c680c8bc8b7833

am: 5b8d279f

Change-Id: Id86a7031965cc900a3ca72ff503544d02f07120e

Do not let apps read uid_concurrent_active_time and
uid_concurrent_policy_time.

b/68399339

Test: Check that they can't be read from the shell
    without root permissions and system_server was able
    to read them

Change-Id: I6f09ef608607cb9f4084ba403a1e7254b8c49a06

This will allow bionic cts test to list network interfaces in
/sys/class/net.

Bug: 70537905
Test: adb shell /data/nativetest/bionic-unit-tests/bionic-unit-tests
--gtest_filter=ifaddrs.getifaddrs_interfaces
Change-Id: Ie07425fc54f9101e911962142824697e64d2bc45

am: 5d937ace

Change-Id: I98befa88e0e92ffdf86a2c69717f8e9530483d44

am: aed99921

Change-Id: I552df075c970f7eeefce33a40661c13837f4959f

am: e9ae7735

Change-Id: If44d773ce2ac76861fdb07975c7dfa0d46929a3e

/odm partition is the extension of /vendor partition, so we should not
use system_file for it. Currently there is no ABI between vendor and
odm. We can use 'odm_file' when needed in the future.

Bug: 64240127
Test: boot a device
Change-Id: I4e8300d597aeeba60a255c8d114a54b24bc39470

am: cf4f3a2e

Change-Id: I4fc382127fa5c9c3ba14f456383ae44a1de4f28a

am: f8fe149f

Change-Id: I894bf5bcb00ca934b3fd5016e86b1a5910ba7c7f