This adds fine-grained policy about who can register and find which
HwBinder services in hwservicemanager.

Test: Play movie in Netflix and Google Play Movies
Test: Play video in YouTube app and YouTube web page
Test: In Google Camera app, take photo (HDR+ and conventional),
      record video (slow motion and normal), and check that photos
      look fine and videos play back with sound.
Test: Cast screen to a Google Cast device
Test: Get location fix in Google Maps
Test: Make and receive a phone call, check that sound works both ways
      and that disconnecting the call frome either end works fine.
Test: Run RsHelloCompute RenderScript demo app
Test: Run fast subset of media CTS tests:
      make and install CtsMediaTestCases.apk
      adb shell am instrument -e size small \
          -w 'android.media.cts/android.support.test.runner.AndroidJUnitRunner'
Test: Play music using Google Play music
Test: Adjust screen brightness via the slider in Quick Settings
Test: adb bugreport
Test: Enroll in fingerprint screen unlock, unlock screen using
      fingerprint
Test: Apply OTA update:
      Make some visible change, e.g., rename Settings app.
      make otatools && \
      make dist
      Ensure device has network connectivity
      ota_call.py -s <serial here> --file out/dist/sailfish-ota-*.zip
      Confirm the change is now live on the device
Bug: 34454312
Change-Id: Iecf74000e6c68f01299667486f3c767912c076d3

This handles any relabeling of vendor_file to a more specific type in
the case of device bringups or future changes to private/file_context
since ueventd will still need read access to all vendor_file's.

Test: Ueventd has read access to any vendor_file_type
Change-Id: I922af54c76d1ef46ea6536e6dc945b37bcc2126a

am: b92c1659

Change-Id: Ia54fb969971c3b605f114fe76b36efdd084faa70

am: 4e941ebb

Change-Id: I2d35c50e87ccbc86ed203d1018aa4724a458e957

am: 910e60c7

Change-Id: I10b076757792b33b75dc3a818495037c6ada0b49

am: b4f62b04  -s ours

Change-Id: Ia292d94402f2c0e46074aeb119867c6f470fc1ad

am: 14bb96f2

Change-Id: I7c9f2eae1ca88ac7aab960a3d8ddef7dace09c5c

am: 7f0c18b4

Change-Id: Ib764462e117579339bda41a6915b7216ffc0d947

am: d250a336

Change-Id: I81ff1d6a9651daeef66e1ea4e2a3c90bcf3e9bb6

am: 162319d0

Change-Id: Ifc803d7d645be1ec7bd1d34f05e821a522f797e2

am: 072f3865

Change-Id: Id583a952f22f4f70d9d9c27572ce0da692ec2688

am: 5684f61f

Change-Id: Ib0a65258afbe3828cd9d5e9921fc42893c729a5e

Allow the shell user to run tzdatacheck, which is required
to enable a new host side test.

This change also adds some additional checks to
tzdatacheck.te to ensure that OEMs opening up permissions
further don't accidentally create a security hole.

Bug: 31008728
Test: Ran CTS
Change-Id: I6ebfb467526b6b2ea08f891420eea24c81ed1e36

rc-style powerctl has beem removed. Accordingly, asan_extract now
needs access to sys.powerctl directly.

Bug: 36458146
Test: m && m SANITIZE_TARGET=address SANITIZE_TARGET_SYSTEM=true
Change-Id: Ic65a858962b4b3dd613fdbfa09f93d21425bf892

am: f8a18d47

Change-Id: Iba5fd78ab1d578878cde958b489c57959ac6a290

Add asanwrapper support for system server under sanitization.

Bug: 36138508
Test: m && m SANITIZE_TARGET=address SANITIZE_LITE=true
Test: adb root && adb shell setprop wrap.system_server asanwrapper
Change-Id: Id930690d2cfd8334c933e0ec5ac62f88850331d0

am: 4f1763ef

Change-Id: I33c0dcab70613c0f0a669d0443332f204b92d55b

am: 456fa279

Change-Id: I440a08708ee39cd1c9f69432ca63e3b256e4f189

am: 67f40ec5

Change-Id: I9e364dd0493d8262739d255b4652a27bc313ede4

Bug: 37504387
Test: aaudio example write_sine, needs MMAP support
Change-Id: I7fbd87ad4803e8edbde4ba79220cb5c0bd6e85a0
Signed-off-by: Phil Burk <philburk@google.com>

Bug: 37485771
Test: sideloaded OTA through recovery on sailfish

Change-Id: I98bb4e0e919db585131391f57545f1a9a0096701
Signed-off-by: Sandeep Patil <sspatil@google.com>

am: 0189fb53

Change-Id: Ib6b2d736ed141f4623e3b1786d22189dd975ce0e

am: 4a55eada

Change-Id: I77d39fc8368a73f386a4ea28d0e9cc7e43c9df79

am: 5f22a4dd

Change-Id: I2e6160a22c850ddbf3fef6d1e3e6a82dcf18db89

am: 0b999249

Change-Id: I8ddae2a19e54d8dc896ea9efc1355019599ca4cb

The PackageManager now passes previous code paths to dex2oat as shared
libraries. dex2oat needs extra permissions in order to access and open
the oat files of these libraries (if they were compiled).

Part of a multi-project change.

Bug: 34169257
Test: cts-tradefed run singleCommand cts -d --module
CtsAppSecurityHostTestCases -t android.appsecurity.cts.SplitTests

(cherry-picked from commit 1103f963)

Change-Id: I3cf810ef5f4f4462f6082dc30d3a7b144dcce0d9

Merge "Add dex2oat permissions to open and read the tmp apk." am: 47061e59 am: 70269b78 am: 24409c36
am: 78a5ffd3  -s ours

Change-Id: I0e43fb52c0d608d0a95d0f0f76121d0792ea4990

hal_client_domain no longer allows read dir permission, in order
to load .so from /system/lib, we have to add this permission ourselves.

bug: 37476803
Change-Id: I1711d158c2f4580f50ac244da10c489df003cc18