am: cdaf97bf

Change-Id: Ibcb3d728c233530f7354b409bf3849a021532b5d

Test: SANITIZE_HOST=true m treble_sepolicy_tests
Change-Id: I9190dc06715bbbac8a267a143801f99f911decf3

am: b22278e4

Change-Id: Id1c46283531412a75ffe46f1beb26d5cdc732b8f

am: f58f1499

Change-Id: Id2eecfe21cfffec6ef95a194f0119d19ef43573e

Change-Id: I721a48a441c4a416c1119b17086462f7cb8e5097

am: 851d5b64

Change-Id: Idc8aef8e3d250b7b7f40d0a51a528988f629298c

Currently lmkd is not able to read memcg info. The mem/swap usage
info are used by lmkd to ugrade medium pressure events to critical
level.

Test: tested on gobo
Bug: 65180281
Change-Id: I19d0eb53d5e754c176ffeda1b5d07049e6af8570

am: 6a1e6a9c

Change-Id: I2584b969c384083fc3601a2213cf0037d4e88bda

Iot would like to allow bootanim to load libraries from /oem but in order for
device-specfic sepolicies to grant exec this global restriction needs to
be relaxed.

Bug: 37992717
Test: Tested with Iot sepolicies in effect and bootanim can exec.
Change-Id: I6462bf510562eb3fb06304e50b68fba05d37b285

am: 94e3dfc3

Change-Id: I63f038889fcf85c9393ec78ae0ac8a30b5806707

This is needed to retain app's previous access to
/sys/devices/system/cpu. When these files were previously
labeled in file_contexts, symlinks were labeled as
sysfs_devices_system_cpu. When labeling was moved to genfs_contexts
symlinks all have the default sysfs label.

avc: denied { getattr } for comm="main"
path="/sys/devices/system/cpu/cpu0/cpufreq" dev="sysfs" ino=41897
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:sysfs:s0 tclass=lnk_file permissive=0

Change-Id: Idaa565390bca13d3819e147fcea4214956c0f589
Bug: 64270911
Test: build aosp_marlin

Bug: 63910933
Test: boot sailfish in normal mode, checks adbd is started
Test: boot sailfish in recovery mode, checks adbd is started
Test: boot bullhead in normal mode, checks adbd is started
Test: boot bullhead in recovery mode, checks adbd is started

Change-Id: I35ed78a15a34626fbd3c21d030e2bf51033f7b79
Merged-In: I35ed78a15a34626fbd3c21d030e2bf51033f7b79
(cherry picked from commit e2423d14)

am: d27aee33

Change-Id: Ia64de6f9da61ce31ae10d8258a3692ce5a0e5815

am: 36ee91d4

Change-Id: I9af35533587e962c63b6dd2543b047bf9899fb5e

Bug: 36899958
Test: Builds 'n' boots.
Change-Id: I5836a18f9d0a9a976dda7304045e3b9e1e84565e
Merged-In: I5836a18f9d0a9a976dda7304045e3b9e1e84565e
(cherry picked from commit c0713e86)

Switch from /data/misc/reboot/last_reboot_reason to persistent
Android property persist.sys.boot.reason for indicating why the
device is rebooted or shutdown.

Introduce protection for all boot reason properties

Protect the following properties with these labels

ro.boot.bootreason      u:object_r:bootloader_boot_reason_prop:s0
sys.boot.reason         u:object_r:sys_boot_reason_prop:s0
persist.sys.boot.reason u:object_r:last_boot_reason_prop:s0

Setup the current as-need access rules for each.

ToDo: Remove u:object_r:reboot_data_file after internal fixes.

Test: system/core/bootstat/boot_reason_test.sh
Bug: 64687998
Change-Id: I3771c73933e8ae2d94aee936c7a38b6282611b80

am: 99cbe530

Change-Id: I008a9509e758cee7802030e1146bbf140b31ba78

am: d9918e12

Change-Id: Ifc423169476761cb9abd840b75088869c02a76bd

am: 9cd2abc2

Change-Id: Ia6c246e2c33453ffcdee628266553a9dbde7da22

If cppreopts.sh failed to copy files for some reason it would leave
the temporary files sitting around in the data directory. This changes
the selinux rules so that cppreopts is able to get rid of these
temporary files.

Test: phone boots.
Bug: 63995897
Change-Id: I2a7e654c3a3cee7c9f0be8ba64e40c365eee4cfe

am: 01cd12a0

Change-Id: I4318fedbee9c45b7a3b738743dfac59a76329336

am: e63f7f32

Change-Id: If629064af97961fdf4fe6914661f2336cf3a1795

am: 24537b2e

Change-Id: I5033a96073010904191b0761112adce076c1d001

This patch tries to provide similar functionality as the previous
change made here:
https://android-review.googlesource.com/#/c/platform/system/sepolicy/+/432339/



Only, making sure we add the same map permissions for the vendor
directory.

Change-Id: Ia965df2881cdee8bb5d81278a1eb740def582871
Signed-off-by: John Stultz <john.stultz@linaro.org>

Some selinux build packages are defined in embedded.mk,
others are defined in system/sepolicy/Android.mk. Move all
to sepolicy as a dependency of the phony package selinux_policy
which is defined in embedded.mk.

Test: build Marlin (Treble) and Angler (non-Treble)
Merged-In: Ib0443ad3da600447fbb51f2e9f91de04dcf5f9f6
Change-Id: Ib0443ad3da600447fbb51f2e9f91de04dcf5f9f6

am: 9be883b8

Change-Id: I05c352e6e24ff63ba820d54e8e9f4718c9065d4a

am: ced80e80

Change-Id: Ie797f9e4abe40d03848449619368e2a0fd23b84c

am: d90d976e

Change-Id: Id7dc23f6b1c401f350736585222a9e29bf5e3876

am: f5646726

Change-Id: I140a9478fa1e95951a784a499dcae89f7bbbcd73

am: 333808ed

Change-Id: I085967e51ebc74a51a024eed33d4df13e7d65a09

am: 109ee5f9

Change-Id: I47562c12713809970d8531b453f08de74c53466f

Denial message:
avc: denied { write } for pid=640 comm="update_verifier" name="kmsg"
dev="tmpfs" ino=13951 scontext=u:r:update_verifier:s0
tcontext=u:object_r:kmsg_device:s0 tclass=chr_file permissive=0

Bug: 64713327
Test: update_verifier logs successfully during boot time.
Change-Id: I421b1e6660239e5ffc624e504f5945d400510407