am: 70d2bb43

Change-Id: I431de9cf6745203ef5c34b5c9e807df6bbac59f5

am: 73b9d8d8

Change-Id: Iaa17a95b76afdca7b7851728228b74b0d98a36fe

am: be7b1b4f

Change-Id: I58c660f564a39e2d60389d922a03966a9160e102

am: e27af27f

Change-Id: I40b4e204ec7d58c7d6971cf7e5e502e10011737a

* changes:
  vold_prepare_subdirs: grant chown
  statsd: annotate boot denials

Test: none
Change-Id: I42f2c2a09235d907b020c4924b91a3428f6c9d8e

Addresses:
avc: denied { chown } for comm="vold_prepare_su" capability=0
scontext=u:r:vold_prepare_subdirs:s0
tcontext=u:r:vold_prepare_subdirs:s0 tclass=capability

Bug: 71796118
Test: build
Change-Id: I64b2f1ad8d6e0748c5820b8a37a4fc4f4101d1fb

Point logspam to its owner.

Bug: 71537285
Test: build
Change-Id: I9db561ee6f2857214b7945b312e6d303630724ea

This CL lists all the exported platform properties in
private/exported_property_contexts.

Additionally accessing core_property_type from vendor components is
restricted.
Instead public_readable_property_type is used to allow vendor components
to read exported platform properties, and accessibility from
vendor_init is also specified explicitly.

Note that whitelisting would be applied only if
PRODUCT_COMPATIBLE_PROPERTY is set on.

Bug: 38146102
Test: tested on walleye with PRODUCT_COMPATIBLE_PROPERTY=true
Change-Id: I304ba428cc4ca82668fec2ddeb17c971e7ec065e

and pulling metrics

Bug: 63757906
Test: manual testing conducted
Change-Id: Ieba524ee676dfb4a457d39d025d203bf02a70831

am: c80f9e03

Change-Id: I1a9201094a3595e2db89688f9ab952453b424b63

Perfetto is a performance instrumentation and logging framework,
living in AOSP's /external/pefetto.
Perfetto introduces in the system one binary and two daemons
(the binary can specialize in either depending on the cmdline).

1) traced: unprivileged daemon. This is architecturally similar to logd.
   It exposes two UNIX sockets:
   - /dev/socket/traced_producer : world-accessible, allows to stream
     tracing data. A tmpfs file descriptor is sent via SCM_RIGHTS
     from traced to each client process, which needs to be able to
     mmap it R/W (but not X)
   - /dev/socket/traced_consumer : privilege-accessible (only from:
     shell, statsd). It allows to configure tracing and read the trace
     buffer.
2) traced_probes: privileged daemon. This needs to:
   - access tracingfs (/d/tracing) to turn tracing on and off.
   - exec atrace
   - connect to traced_producer to stream data to traced.

init.rc file:
https://android-review.googlesource.com/c/platform/external/perfetto/+/575382/14/perfetto.rc

Bug: 70942310
Change-Id: Ia3b5fdacbd5a8e6e23b82f1d6fabfa07e4abc405

am: 31b11d8e

Change-Id: I39fd53f56099df371ec9f8ea8938b6aefb131f49

communicate with statsd

Test: manual testing conducted
Change-Id: Icd268e258f7cbdd9310baab53fe0c66f4f303d5e

am: 3ec0dbf7

Change-Id: I7425e40aa7fa6453597bd1ca11a2a7a7c0ed7889

am: fbb05ff0

Change-Id: Iac6829e185218cb03dd5d430c25b43b61fc0ab13

am: 64a0f928

Change-Id: I087db0855e429f4b15e4f312cfc6004007eb1f79

am: e1b73b14

Change-Id: If124289b51f6fb5c93a30a003c8509e78d0ca417

am: d711d4d2

Change-Id: Ib88d5b8599dd8795be42f1d20997f116230d3858

This reverts commit d711d4d2.

Reason for revert: Shouldn't have submitted...

Change-Id: I5b88101f381ca59132ec7d24990ea41ac1b84171

getprop is broken out from toolbox/toybox, however its permissions
should remain the same, so label it appropriately.

Bug: 36001741
Test: boot bullhead with the new getprop
Change-Id: I4114ea21998da95173d882038bc6aebf39b64d7f

This reverts commit 640e595a. The
corresponding code in libcutils was removed, so this is now unneeded.

Bug: 71632076
Test: aosp_sailfish still works

Change-Id: I615bab83e9a83bc14439b8ab90c00d3156b0a7c4

am: 3680f835

Change-Id: Id34d1342e1ac5ff2117998a3b49a20d5be2a6416

am: 06058636

Change-Id: I0b9c704a863a9378937c1f06d844dec12ee31cba

This fixes an incorrect exception in the neverallow rule.

Test: Built policy for all lunch targets.
Change-Id: I283833131c6f1fd741e934de24c838594ac38a18

am: a8d9191f

Change-Id: I134a0d70c1075dee70991daa915a516bc21dab24

Finalize Wi-Fi RTT service name per API review.

Note: CL 2 of 2 - removing old entry.

Bug: 65108607
Test: integration tests
Change-Id: Id2b3d91ea2ca578a5834a299275df188c68475da

Finalize Wi-Fi RTT service name per API review.

Note: CL 1 of 2 - adding new entry here, will remove
old entry in next CL.

Bug: 65108607
Test: integration tests
Change-Id: I065ce9d570510180fa8c8f09e1025ac795706405

am: fd9f7de7

Change-Id: I1450316521d217109a84027cf4f760c90cf4812d

am: 70c21a62

Change-Id: I4acdfc65e2fdbefd0bdd2d9442ea087fc7d173b8

This reverts commit b40eb255.

Change-Id: I04d9e76152ed11ada4cabcc79bb4eec827f8abef