* commit 'c34a2527':
  Allow shell to connect to property service

Change-Id: I06ea2b400cc826c684b6ad25e12b021c2667b48a

* commit '61c80d5e':
  Update policy for Android 4.2 / latest master.

Update policy for Android 4.2 / latest master.
Primarily this consists of changes around the bluetooth subsystem.
The zygote also needs further permissions to set up /storage/emulated.
adbd service now gets a socket under /dev/socket.
keystore uses the binder.

Change-Id: I8c5aeb8d100313c75169734a0fa614aa974b3bfc
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

am eab23895: Merge "Revert "Include su.te only for userdebug/eng builds."" into jb-mr1-dev-plus-aosp

* commit 'eab23895':
  Revert "Include su.te only for userdebug/eng builds."

* commit '8c87a18d':
  Add SELinux policy for asec containers.

* commit 'eefaa83d':
  Moved Android policy tools to tools directory

* commit 'df822f41':
  Add SELinux policy for asec containers.

* commit 'cdfb06f5':
  Moved Android policy tools to tools directory

This reverts commit af56ac19.

Change-Id: Id658a90b58ea31365051c0878c58393fd055fc69

Change-Id: I57b0dd9f8071eae492020f410c87f465ba820711

* commit '83dde220':
  Change 0 to NULL Byte

* commit 'f6647eb9':
  Change 0 to NULL Byte

Change-Id: I16b47f8dbf64e8dffb550b5a89321f920604ef7a

* commit 'a2517b20':
  Add better per-device sepolicy support.

Change-Id: I3112f4cf0fafb6e7e3c9c60084a097f5e6190c22

This is a rewrite of the existing implementation.
Three new variables are now needed to add/modify
the exisitng base policy. They are, BOARD_SEPOLICY_REPLACE
and BOARD_SEPOLICY_UNION which govern what files
are replaced and concatenated, and BOARD_SEPOLICY_DIRS
which lists the various directories that will contain
the BOARD_SEPOLICY_REPLACE and BOARD_SEPOLICY_UNION
policy files.

Change-Id: Id33381268cef03245c56bc5242fec7da9b6c6493
Signed-off-by: rpcraig <robertpcraig@gmail.com>

* commit '6b964fa1':
  Use file target as dependency.

* commit 'd8b122c7':
  Use file target as dependency.

"sepolicy" is a phony target defined by the build system.
If you use it as dependency of a file target, you'll get unnecessary
rebuild.

Change-Id: I3a948ebbaff6a146050eb86a3d04cdc050f7c001

* commit '8f4600c0':
  Add double free protection to checkseapp.

* commit '5dbfdc0b':
  Add double free protection to checkseapp.

A double free error occurs when building with non glibc
devices. The hdestroy() function frees all comparison
keys internally in these cases. So avoid an explicit
call to free().

Change-Id: If9c5dc1a969605cd1eeb9218de02a9f8dbbd3ae1
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Creates 2 new types:
- asec_apk_file : files found under /mnt/asec
                  when the asec images are mounted
- asec_image_file : the actual encrypted apks under
                    /data/app-asec

Change-Id: I963472add1980ac068d3a6d36a24f27233022832
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

am 84b7472d: am 6766cc9e: Merge "allow apps access to the keystore, dhcp/pptp fixes, wifi fixes and isolated_app access"

* commit '84b7472d':
  allow apps access to the keystore, dhcp/pptp fixes, wifi fixes and isolated_app access

* commit 'ca895fbc':
  file class macro cleanup

am 6766cc9e: Merge "allow apps access to the keystore, dhcp/pptp fixes, wifi fixes and isolated_app access"

* commit '6766cc9e':
  allow apps access to the keystore, dhcp/pptp fixes, wifi fixes and isolated_app access

* commit '91c12e3c':
  file class macro cleanup

* commit 'ced365aa':
  Add a checkfc utility to check file_contexts validity and invoke it.

* commit '01a58af1':
  Add a checkfc utility to check file_contexts validity and invoke it.

Change-Id: I4b12dc3dcb432edbdf95dd3bc97f809912ce86d1
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

* commit 'b83bb3f0':
  Revert "ISSUE 6849488 Bluedroid stack, remove system/bluetooth."

This reverts commit b620dc60.

(cherry picked from commit 128db962)

Change-Id: I21227e6232c925a42597e5c8fc0fcc0585d7a876

* commit '44374bc5':
  Remove HAVE_SELINUX guard

* commit '659aaced':
  Remove HAVE_SELINUX guard

- allow all apps to connect to the keystore over unix socket
- dhcp runs scripts in /system/etc/dhcpcd/dhcpcd-hooks and creates/removes lease files
- mtp connects to dnsproxyd when a pptp vpn connection is established
- allow appdomain to also open qtaguid_proc and release_app to read qtaguid_device
- WifiWatchDog uses packet_socket when wifi comes up
- apps interact with isolated_apps when an app uses an isolated service and uses sockets for that interaction
- for apps with levelFromUid=true to interact with isolated_app, isolated_app must be an mlstrustedsubject

Change-Id: I09ff676267ab588ad4c73f04d8f23dba863c5949
Signed-off-by: Joshua Brindle <jbrindle@tresys.com>