am: 5ee08053

Change-Id: I530872c3d9a8ddf5a03353b27e75ea1043cd2ab2

am: dddbd2f3

Change-Id: I517d7bbd415e28d2ba7719f17c1ddcc7c28f20a0

am: 3d8dde0e

Change-Id: I19cb50ee62d217f025bb7fcf535257dac3b3610e

Commit https://android.googlesource.com/kernel/common/+/f0ce0eee added
CAP_SYS_RESOURCE as a capability check which would allow access to
sensitive /proc/PID files. However, in an SELinux based world, allowing
this access causes CAP_SYS_RESOURCE to duplicate what CAP_SYS_PTRACE
(without :process ptrace) already provides.

Use CAP_SYS_PTRACE instead of CAP_SYS_RESOURCE.

Test: Device boots, functionality remains identical, no sys_resource
denials from system_server.
Bug: 34951864
Bug: 38496951
Change-Id: I04d745b436ad75ee1ebecf0a61c6891858022e34
(cherry picked from commit 44866954)

Bug: http://b/32123312
Test: mm && boot
Change-Id: I6550fbe2bd5f9f5a474419b483b0f786d4025e88

am: f9181a2e

Change-Id: I46ffea21cccb896ef17d8434b009db263ba70e6e

am: 48c63657

Change-Id: I6e38561883d6a898cb0a719d10b6f2726a947354

nougat-mr1-cts-dev

(The change is already present as 320a0f54).

BUG: 33090058
Change-Id: I2451c334d3a1a42d2d5a46f8f6d22dc5d503f034

am: 8a54bd7f

Change-Id: Idd2020ed762067eeaf61fcbd625ce38505583e17

am: 250495a4

Change-Id: Ieb3b86e38a72f6b83ecd39e99a463c9b86e70a9d

am: 87a56541

Change-Id: I56c57b4a2e2ef71dd2eceb58a78c4e7e7628da00

/data/bugreports is moving to /bugreports

Bug: 27262109
Bug: 27204904
Bug: 32799236
Test: new symlink is in /bugreports and is labeled correctly

(cherry picked from commit d314376d)

Change-Id: Ia9aca3ff642b2171e9b0ece7c2b420a0d38006cc

allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 am: c6c8da37 am: f43135fd
am: b2930607

Change-Id: I7ab37535f7a471712e5511dc0917cbf68bb7a1d5

allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 am: c6c8da37
am: f43135fd

Change-Id: Ia01ca88536362fe910808f33a445fc5c8c54b77f

am: c6c8da37

Change-Id: I2dcb374609183a4460891c936757319d91064682

am: adf210d6

Change-Id: I0386db7e81ed5e6a6c032adb1173163f45ad726e

am: 0f81e066

Change-Id: I32529d2b8ad064f41d357f35b15c9acd31381bee

am: 7a393427

Change-Id: Ia78328cffdba927301761e99174533623a6c1966

Change-Id: Ia938d73b1a49b9ba4acf906df37095d21edee22e

Ignore, as it's a side effect of mounting /vendor.

Bug: 31116514
Change-Id: If94a27a26181e40de5c5e60f5446de9ce2ccdba0

(cherry picked from commit e123f061)

BUG: 31828706
BUG: 30832947

Change-Id: Icd5117d655f1197524b39fe7bc1b11c4d920093c
(cherry picked from commit c78db969)

am: f781f952

Change-Id: If31aa1ecf8dae506d7e556702f3ca08d0efdabc9

am: 21d78e0f

Change-Id: I2f9829077cf1f48b718afefc4d7d35f92d6e73b9

am: c6effa90

Change-Id: Id257877621b9375bca7d32e68d90c7a5c2a91f5d

am: 63c7ad6e

Change-Id: I5b9383b4c50d2eecd995db6943a0a27e50fb6fdd

Bug: 23113288
Change-Id: I123e5d40955358665800fe3b86cd5f8dbaeb8717

Allow bootanim process to access audioserver service.

Bug: 31651778
Change-Id: I5bec8812877792b1df3b37dddc5ccea3b243f5c4

am: d0561efe

Change-Id: Id1537bf36a218f3727caef36659a40087c19feb9

This allows the ConnectivityMetrics app to dump connmetrics service
metrics.

Bug: 31254800
Change-Id: I4c3da8cc80a5820dbed9843badc1464f3ae40581

am: 5ed3131e

Change-Id: Idd271962226c30a157c1b04f6ee3c56afe1f7f28

am: f412cc62

Change-Id: I576ad54dc5526a022e0725b15a2e326df5432e31

Bug: 31254800
Change-Id: If8708c8a4e0ea7655f31028881248a14cf2ba5f7

am: 030632f0

Change-Id: I2a2a4208770736207aeb1226f5d4f00b3eb3d57e

am: 8db0f254

Change-Id: I10537bd00dcb129741b10c3af960e7f6eacd459e

am: 35a0597a

Change-Id: I8ee43acea1274d46ca6071c472b8c7427101b384

am: 28e18c3a

Change-Id: I88bec1549bb1a28b70cb32b10911baa8d91669e9

am: a60342b7

Change-Id: I2d7c99660b6bb9b45922f1203cb1eafe90659238

bug: 30963384

(cherry picked from commit 63203a01)

Change-Id: Ifa4b9a645f8edcf51e3f025316106e5b65a4790d