am: a3d02508

Change-Id: I89c1785e6acea09314ceab680a6d46cb3e34ae43

am: 0989692e

Change-Id: I438b17d057a299dab2a32ec9a4247838efeec4c5

am: fff3fe2f

Change-Id: I90fbe24c3e2f7c6d62234e49026b59064b156cbf

Copy the final system sepolicy from oc-dev to its prebuilt dir
corresponding to its version (26.0) so that we can uprev policy and
start maintaining compatibility files, as well as use it for CTS
tests targeting future platforms.

(cherry-pick of commit: 5c6a227e)

Bug: 37896931
Bug: 37916906
Test: none, this just copies the old policy.
Change-Id: Ib069d505e42595c467e5d1164fb16fcb0286ab93

am: e06f443c

Change-Id: Ib2245d6767275440d9c0ad775222d8c923e0281f

am: 0d5bca44

Change-Id: I31b9e976864301454fd82108d51f2ac9cda34578

am: e83f1e56

Change-Id: I6c7a9a6c52f670a8f18240def3b0b1f416001236

On full Treble devices, servicemanager should only host services
served from processes on /system; nonplat_service_contexts
should not be created at all in this case.

Bug: 36866029
Test: Build marlin and make sure nonplat_service_contexts is not
      created.

Change-Id: Id02c314abbb98fc69884198779488c52231d22c3
Merged-In: Id02c314abbb98fc69884198779488c52231d22c3

am: 59f23650  -s ours

Change-Id: I8563d9e3347f7c62d9fcd5b2c26c160a957be0b5

am: 8b6ceed0

Change-Id: I39a8c2a75f646f3943d925adc4444777a90b9076

am: 5b2ebd3b

Change-Id: I74209b877fdacaa485798b393678989029835924

This reverts commit 9216a6ad.

Bug: 65206688

Merged-In: I8e61b77a1abe9543e4fba77defb8062407676fcf
Change-Id: I8e61b77a1abe9543e4fba77defb8062407676fcf

am: a30b6a5c

Change-Id: I3f7ace8c849689d66558c38c149453564920d013

am: 4deeab5c

Change-Id: I74319e51a152ba35fdf076a4dffdeeb0dc69763b

am: cdaf97bf

Change-Id: Ibcb3d728c233530f7354b409bf3849a021532b5d

am: 123cf237

Change-Id: I77c8793363ad2e3736ca587070b1cbd119168f53

Test: SANITIZE_HOST=true m treble_sepolicy_tests
Change-Id: I9190dc06715bbbac8a267a143801f99f911decf3

am: fa85fac7

Change-Id: I43092ff1907c28239565b813c84be43cdc8aae5e

am: adf68570

Change-Id: Ida2b4c0d8f400c753566861bd48bcf5459fc40b7

am: b22278e4

Change-Id: Id1c46283531412a75ffe46f1beb26d5cdc732b8f

am: 15f9d052

Change-Id: I63deaebd7e90dafb1c6afa00b9b9474344a4cc6e

am: ba4d04e0

Change-Id: Iea1a6d7fc4220566b912d19122b820d918b333d8

am: 60e53837

Change-Id: Ic262062da2065dddbabaff26f38d779f4e63b95d

am: f606a51e

Change-Id: If76f2528ca0edb4f0ad37a85fdc85356ab1e14ae

am: 9c571765

Change-Id: I5834ea1a451989905c893194857fc77f3bad529e

Allows groups to be mounted at /dev/memcg

Addresses:
avc: denied { associate } for comm="init" name="memcg"
scontext=u:object_r:cgroup:s0 tcontext=u:object_r:tmpfs:s0
tclass=filesystem permissive=0

Bug: 64067152
Test: build
Change-Id: Ic8f641e841fe09c8f7fd487ed67cf0ab4860a1cc

Currently lmkd is not able to read memcg info. The mem/swap usage
info are used by lmkd to ugrade medium pressure events to critical
level.

Test: tested on gobo
Bug: 65180281
Change-Id: I19d0eb53d5e754c176ffeda1b5d07049e6af8570

This reverts commit f27bba93.

Bug: 65206688

Change-Id: I8e61b77a1abe9543e4fba77defb8062407676fcf

This reverts commit c12c7349.

Bug: 65206688

Change-Id: Ia2a04906f8585bf295b8c75e0b3d09490afb5d24

This reverts commit b5dd44b1.

Bug: 65206688

Change-Id: I00431ae7834a562e34e8959446d84a0077834091

am: b5dd44b1

Change-Id: Ic8abc28d08483866112dd8075340fe71e82ae653

screencap domain needs additional permissions for
dumpstate to dump screenshots.

Test: adb shell cmd activity bug-report
Bug: 65206688
Change-Id: I824f345fd90d286454d570576c5888d7719c4c5c

am: c12c7349

Change-Id: I419f605b03d497d3babd09651b977bc065677c71

am: 9a5d0035

Change-Id: I19ea55e0064eb3cfd5e0f0de1e5076a0ac0b2f40

am: 1019861b

Change-Id: Id63c00a6cef89bd745947d9611d08b522426d8d1