Test: mmm system/sepolicy
Bug: 34980020
Change-Id: I36547658a844c58fcb21bb5a0244ab6f61291736

am: d019378c

Change-Id: Ibfeb05b43e631d37e7fb88ef9f8e1b9f3fb171f3

am: c4aaca52

Change-Id: I4b2bfb5fd472b25bb4164e859446b8dcaf931abd

am: 5050c632

Change-Id: I9850b60c7d45ca062bb42dcc00ed4abe36ec1989

am: 7aad3b3b

Change-Id: I58a2908d75f411565ed6c0ffd08e299f4ff86383

am: 11620416

Change-Id: Iaeec958064ce96957b0e72622a94ec69014fc620

am: d090db9d

Change-Id: I4ea7560f259b3e28ac1881f133edd493dc545820

am: 7f07b8dc

Change-Id: I94286daa5561f82103fbba8dbe4c8c8099f24155

am: af876c56

Change-Id: I0c3254f2a1345094dacda6747575a653306ff13d

am: 29ec5d42

Change-Id: I461cb74c1151ac9ac91d80fe7ef1c2d9c8e433ca

am: 17d25942

Change-Id: If7b06933584b86347a1a7b162f66df2af8840938

Merge "sepolicy: make exec_types in /vendor a subset of vendor_file_type" into oc-dev am: c01a7e19
am: 64c41a71

Change-Id: I51768d388cb25ea1a0b345d99f3d7fd9b57be25c

am: c01a7e19

Change-Id: I9a68f3ec130cb1fc1ce06931e33b30736f43e578

Test: test_aaudio.cpp
Bug: 33398120
Change-Id: I0712f60c898136154d729ceb1103ee021cc6ab82
Signed-off-by: Phil Burk <philburk@google.com>
(cherry picked from commit 8b9d93f2)

am: fd36f77d

Change-Id: I32567c69423546a49441dcc106ff599ffc7e869a

am: 5729e101

Change-Id: I7b0bed9357f5cdae679dd799dad702eafe2ce401

The original purpose of BOARD_SEPOLICY_VERS_DIR was to allow the
specification of an alternate platform public policy, primarily for
testing purposes.  This should not be a part of the released platform,
since the only public policy and corresponding mapping file construction
should be based on the current public platform policy, with compatibility
with vendor policy targeting previous versions provided by static mapping
files.  Its continued presence muddles the generation of mapping files by
potentially introducing a situation in which an incorrect mapping file is
generated.  Remove it.

Bug: 36783775
Test: Device boots with compiled SELinux policy (SHA256s don't match for
precompiled policy).

Change-Id: I9e2100a7d709c9c0949f4e556229623961291a32

am: 35d2a46a

Change-Id: I730360302ac12367607aa5ca8266413812ca82ab

Recovery is not meant to be versioned in the treble model, but rather
provided as part of the platform/framework component and self-sufficient.
Simplify its compilation by removing the attribute versioning steps, but
maintain device-specific policy, which is currently required for full
functionality.

Bug: 37240781
Bug: 36783775
Test: recovery boots and is able to select commands.  Also tried:
reboot system, boot to bootloader, factory reset, sideload, view logs,
run graphics test, and power off.

Change-Id: I637819844d9a8ea5b315404f4abd03e8f923303a

am: 718ec4f8

Change-Id: If987b23d2998ee35a18e938b37451a659a9841a4

am: c1463bfb

Change-Id: I252460e54aeae7f0e0fd84bf1aeeecddfe1225a6

am: 20fe64e7

Change-Id: Id1d70b14a7035d18b5bb6ef9720fc0b5689bb722

As the platform progresses in the split SELinux world, the platform
will need to maintain mapping files back to previous platform versions
to maintain backwards compatibility with vendor images which have SELinux
policy written based on the older versions.  This requires shipping multiple
mapping files with the system image so that the right one can be selected.
Change the name and location of the mapping file to reflect this.  Also add
a file to the vendor partition indicating which version is being targeted that
the platform can use to determine which mapping file to choose.

Bug: 36783775
Test: Force compilation of sepolicy on-device with mapping file changed
to new location and name, using the value reported on /vendor.

Change-Id: I93ab3e52c2c80c493719dc3825bc731867ea76d4

With build/core eaa9d88cf, system_server should not be loading code
from /data. Add an auditallow rule to report violations.

Bug: 37214733
Test: Boot marlin, no SELinux audit lines for system_server.
Change-Id: I2e25eb144503274025bd4fc9bb519555851f6521
(cherry picked from commit 665128fa)

am: 6b2e934c

Change-Id: If4839eb04ee034f4cdc10db1d04b39e13c718b5c

am: bf500f92

Change-Id: I2fa4f3ada422b7e077b1184fc818c792ef7d6f0b

am: 976fb16b

Change-Id: Ibbb29d866be7a7a59bf96bd30085c1d958d39971

am: 1950bb8c

Change-Id: I7e27cf5ea9d74113fbb159b87602673444ace6a2

am: 5f37f670

Change-Id: I6f8c6580a4ebe5f9099c3779548cf5ae46a9f3a8

am: f6eb2ad6

Change-Id: Ica844c95214cdf8b26a94e261f1f7a0ed734083c