* commit 'f4d5f3e1':
  Add missing seinfo tag from mac_permissions.xml policy.

* commit '2ae799e4':
  Drop separate domain for browser.

* commit '0ecb0f88':
  Eliminate most of the app policy booleans.

Change-Id: Ib37b392cb6f6d3fb80852b9a2a6547ab86cd9bff
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

Just allow them unconditionally for compatibility.

Change-Id: I85b56532c6389bdfa25731042b98d8f254bd80ee
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

A prior merge accidentally dropped the seinfo tag from the
release keys stanza.

Change-Id: I99f9ea8d0981c5324c3875896b0673552a03d2ca
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

* commit '96c109e8':
  Revert "Revert "Rewrite mac_permissions.xml file.""

This reverts commit 31d1a40b

Change-Id: I70aab6f01b9a74512dcbd9bff167890747e54355

* commit 'e693ed7c':
  Remove the su domain from -user builds.

* commit '16820182':
  Expand insertkeys.py script to allow union of files.

* commit 'e69552ba':
  Revert "Revert "Various minor policy fixes based on CTS.""

Change-Id: I86f2f28f7c558b8e9a70e5aa9ebcfa8bf26f9ef7

* commit '65d4f44c':
  Various policy updates.

This reverts commit ba84bf1d

Hidden dependency resolved.

Change-Id: I9f0844f643abfda8405db2c722a36c847882c392

Allow script to union mac_permissions.xml files
specified using the BOARD_SEPOLICY_DIRS and
BOARD_SEPOLICY_UNION constructs.

Change-Id: I4fc65fd1ab4c612f25e966f030247e54a270b614
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Assortment of policy changes include:
 * Bluetooth domain to talk to init and procfs.
 * New device node domains.
 * Allow zygote to talk to its executable.
 * Update system domain access to new device node domains.
 * Create a post-process sepolicy with dontaudits removed.
 * Allow rild to use the tty device.

Change-Id: Ibb96b590d0035b8f6d1606cd5e4393c174d10ffb
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

* commit 'bf539bf3':
  Fix makefile error with ANDROID_BUILD_TOP

* commit 'edf7b4c8':
  Revert "Revert "Revert "Revert "Dynamic insertion of pubkey to mac_permissions.xml""""

This reverts commit 60d4d71e

This should (finally) be fixed in https://android-review.googlesource.com/#/c/54730/

Change-Id: I3dd358560f7236f28387ffbe247fc2b004e303ea

Use TOP instead of ANDROID_BUILD_TOP

Fix spelling issues in keys.conf

Change-Id: Ib90b3041af5ef68f30f4ab78c768ad225987ef2d

* commit '60d4d71e':
  Revert "Revert "Revert "Dynamic insertion of pubkey to mac_permissions.xml"""

This reverts commit cd4104e8

This builds clean locally, but seems to explode on the build servers. Reverting until there's a solution.

Change-Id: I09200db37c193f39c77486d5957a8f5916e38aa0

* commit '82fe3d24':
  Revert "Rewrite mac_permissions.xml file."

This reverts commit b24c30b4

Reverting the changes that depend on insertkeys until the issues there are resolved.

Change-Id: Ie7e0d6657d8e7cfb44fc3efa2f99c8d1011a0fe1

* commit '1620c671':
  Introduce security labels for 2 new device nodes.

* commit 'b24c30b4':
  Rewrite mac_permissions.xml file.

* commit 'cd4104e8':
  Revert "Revert "Dynamic insertion of pubkey to mac_permissions.xml""

Rewrite all stanzas to only include seinfo tags.

Change-Id: I4d528ce092ec8d1aac15195ed3a8e307d604607e
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

This reverts commit 1446e714

Hidden dependency has been resolved.

Change-Id: Ia535c0b9468ea5f705dff9813186a7fa8bab84ae

iio: Industrial I/O subsystem
usb_accessory: accessory protocol for usb

Allow system access in both cases.

Change-Id: I02db9775ec2ddaaeda40fae6d5e56e320957b09c
Signed-off-by: Robert Craig <rpcraig@tycho.ncsc.mil>

* commit 'c3295802':
  New users need a wallpaper_file type.

* commit 'eee138c2':
  Allow zygote to search tmpfs.

* commit '41e53901':
  New dev_types and other minor adjustments.