Bug: 63669128
Test: Checked for avc denail messages.
Change-Id: I057b3cf9ccc945cb943b9cf60fc9cd6c023eddda

am: c1dba09f

Change-Id: I08164844e37e12b7221298620bf3a66cc2087c2e

am: 977949e3

Change-Id: I9b145b354413e77e02b67e83f411cec709c7d8e1

am: ee1ff622

Change-Id: Icacd360b526c2133c3cee0c5c9e9055406fb943c

am: abe248d1

Change-Id: Id7202a1c4a991e0f130bf34a0adb7f913434a617

am: 536d1954

Change-Id: Icb5b0f78d2c59b49f2160bed76323595ca630920

am: 5d5284ad

Change-Id: I41e2066c96c327f3401714c25f63e640b1a5b7b7

am: 0399f1e4

Change-Id: I143916184d8741093139d1d25213f8432fad4c01

am: 1f5cce99

Change-Id: If2858e33bc11c09789eb5155d912a24b6a87a2b6

am: 006abea2

Change-Id: Ibc2e3ef4544a42617e4e5ccabac84bda9a1d1cd2

am: d39b16ba

Change-Id: Ie2ba263f204502356ba54b0c1acaa5450f4af7d1

am: 5971d678

Change-Id: I3888b7843214d8ec5cb973dd1657c8d1e4364609

am: 1dafee26

Change-Id: I2b3f6e3d57a8afa929bfb0976258e0e5ab7a32eb

Bug: 70846424
Test: neverallow not tripped
Change-Id: I9e351ee906162a594930b5ab300facb5fe807f13

Test: charger mode correctly shuts off when unplugged

Change-Id: I06a7ffad67beb9f6d9642c4f53c35067b0dc2b3d
Fixes: 71328882

am: 0e194f1e

Change-Id: Ie731c4076669e067b049b68082ac6b77f3f3094d

am: 3f63d625

Change-Id: If6bb3de42b53caa1f3a28b9ed6e9d4f17a4b20e2

am: 74828e65

Change-Id: I1ba1400dbdfb7eebd0a40571cc65dec45f081d57

Bug: 72154054
Test: tested with walleye
Change-Id: I35271c6044946c4ec639409c914d54247cfb9f79

Bug: 65643247
Test: builds, the change doesn't affect runtime behavior.

Change-Id: I621a8006db7074f124cb16a12662c768bb31e465

Adds per-app categories to untrusted app domains and their
app data types. Per-app categories are in addition to the
existing per-user categories.

Apps targeting sdk version 28+ will now have the following
characteristics:
Domain: u:r:untrusted_app:s0:c[0-9]+,c[0-9]+,c[0-9],c[0-9]
Data context: u:object_r:app_data_file:s0:c[0-9]+,c[0-9]+,c[0-9],c[0-9]

Whereas apps targeting 27- will look like:
Domain: u:r:untrusted_app_27:s0:c[0-9]+,c[0-9]+
Data context: u:object_r:app_data_file:s0:c[0-9]+,c[0-9]+

To ensure backwards compatibility with previous SDK versions,
the levelFrom=all now enforces categories by dominance instead of
equality. Apps with per-app and per-user categories will continue
to have selinux permissions (but not necessarily unix permissions)
to access app data with only per-user categories, but apps with only
per-user categories will not be able to access the data of apps with
both per-app and per-user categories.

Bug: 63897054
Test: Boot sailfish, run apps, verify no new selinux denials.
Test: cts-tradefed run cts -m CtsSelinuxTargetSdkCurrentTestCases
Test: cts-tradefed run cts -m CtsSelinuxTargetSdk27TestCases
Test: cts-tradefed run cts -m CtsSelinuxTargetSdk25TestCases
Test: adb sideload an OTA and verify that files are correctly labeled.
Change-Id: I64b013874fe87b55f47e817a1279e76ecf86b7c0

am: dfe6c3b0

Change-Id: I5395817f5113ad69b50a74bb7750ae2f7cdaef1d

am: 2a29ebac

Change-Id: I08c7649facbffb858b9f143efc7123e8f8085569

am: 3ac8456f

Change-Id: Ie724f09b937b2890f528592b3b5afea915ea7578

am: 98b70dcb

Change-Id: I8c7a40a256d275979ceaab4fc57963f24cec2460

am: c25c474c

Change-Id: I1d70c2b8ecdf21bdd9b19edb66d4ccb9e47e213e

am: ec4d4a5e

Change-Id: I17d84198a6c0f5dfe556d5b688f9d92e5f2238b1

avc: denied { read } scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:proc_version:s0 tclass=file
avc: denied { read } scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:wifi_prop:s0 tclass=file
avc: denied { read } scontext=u:r:priv_app:s0:c512,c768
tcontext=u:object_r:net_dns_prop:s0 tclass=file

Bug: 72151306
Test: build
Change-Id: I4b658ccd128746356f635ca7955385a89609eea1

Since /odm is an extension of /vendor, its default property contexts
should be consistent with ones of /vendor.

Bug: 36796459
Test: tested on wahoo devices
Change-Id: Ia67ebe81e9c7102aab35a34f14738ed9a24811d3

am: 38b22466

Change-Id: Ifc0122974741000970b19e3053b380087291cdc4

am: 236e1b7e

Change-Id: I963a4fd6d26f574137d884b92febea1e7f2926c3

am: e638b198

Change-Id: I8cab5775ea450daa65a72e75828b76b7eb831c90