am: ed2011f0

Change-Id: Ie8696f33721a42437ac93b1ee0d481e11d866382

am: 7c89c5fd

Change-Id: Ia616f226a414bf86b3237f0469925117adb152a4

am: fb812648

Change-Id: If684f85cd433cd9e9fad8c369fe9f0732739d40b

am: 8ad57ef6

Change-Id: Ia8b668f32c10343fc9704be791e35a84127dc4b0

Delete rule for permission_service since we use packages.list instead.

Test: adb shell storaged -u
Bug: 34198239
Change-Id: Ic69d0fe185e627a932bbf8e85fc13163077bbe6b

am: 43eab5d8

Change-Id: Ic925a5dba64e728b2283f53f83fd7971ed741412

am: ba4dae35

Change-Id: I562ee6b39a86fe5be5e26301d1f988a0e582a2aa

am: 20868a1b

Change-Id: I83e355565f11aa6a44973f6c3b4c9a421ff66267

am: 94668169

Change-Id: Iedaf0cb27d1bf4b0cf21a8a827b26fa12dcd326e

Test: pass
Change-Id: Ie1a6513f8fa9cb4b007fccefe63ccb78fcd45578

Merge "Grant rild and gatekeeperd access to hwservicemanager" am: 7d98edfb am: 6ea577a5 am: 7e3e9ffb
am: c554b82a

Change-Id: I592f25ea58e9da9b69df7b6d62cd4c356b086517

am: 7e3e9ffb

Change-Id: I7657ef58ee953f1696327257564993653c98fc34

am: 6ea577a5

Change-Id: Ifd182b1ab935d1acc4197936161f477920a61f1c

am: 7d98edfb

Change-Id: I77e9a25e3f12da33babd5f4bfe8e5a2f12eae0a0

am: fdb442bb

Change-Id: I4409dfe0be1ab995c0a43439036e4344c50be4cb

am: deb533c7

Change-Id: I08ad2d2b16243993a4b6fb245bb579229a31b27d

am: f2827964

Change-Id: I0bc94f0af23d692d3d632dc46e5bad15c76823f3

- Allow cameraservice to talk to hwbinder, hwservicemanager
- Allow hal_camera to talk to the same interfaces as cameraservice

Test: Compiles, confirmed that cameraservice can call hwservicemanager
Bug: 32991422

(cherry picked from commit 9c43a3ff)
Change-Id: Ied0a3f5f7149e29c468a13887510c78d555dcb2a

Change-Id: I8280f8aa5fb90b68d3d4f8997076e9bdf28da92d

am: 5224fefe

Change-Id: I4fbd474be69e675f982b70673aa49480227734e1

am: a98b9804

Change-Id: I9ee6a1b562eff63a2e09c41fa9ea126f92709ca9

Change-Id: I49ec3c6970ef51a220dbb6d9ec3c6b2b0c94612b

In my commit f41d89eb I forgot to
switch rild and gatekeeperd rules from explicitly associating these
domains with the hal_telephony and hal_gatekeeper to using the
hal_impl_domain macro. As a result, the recent commit
a2519226 inadvertently revoked
HwBinder access from rild and gatekeeperd.

This commit fixes the issue by switching rild and gatekeeperd to the
hal_impl_domain macro.

Test: "sepolicy-analyze out/target/product/bullhead/root/sepolicy attribute haldomain"
      now lists rild and gatekeeperd
Test: "sepolicy-analyze out/target/product/bullhead/root/sepolicy attribute hal_telephony"
      still lists rild
Test: "sepolicy-analyze out/target/product/bullhead/root/sepolicy attribute hal_gatekeeper"
      still lists gatekeeperd
Bug: 34180936
Bug: 34470443
Change-Id: I7949556f58c36811205d5ea3ee78ea5708e95b45

am: a53adef7

Change-Id: Idbf7a9cd75d3950e81745eaa01a38420ae44420f

am: 3758eb6c

Change-Id: Ib333b148bd41b3804c7c3085cd97b2ce39d77c38

am: 9c4aac9c

Change-Id: Ifae9d87e88b67603d7fc4d2ebd00babe5777ddfd

am: 4eddb3e3

Change-Id: Ic3968a0a3fb4d932b9d05afd0d38a16c96f03388

Fix the following denial:

tombstoned: type=1400 audit(0.0:563): avc: denied { append } for path="/data/anr/traces.txt" dev="sda35" ino=679941 scontext=u:r:tombstoned:s0 tcontext=u:object_r:anr_data_file:s0 tclass=file permissive=0

Bug: http://b/34472671
Test: mma
Change-Id: Iab5fbaf50888aa0f195841cb7e718ff393e526dd

Test: No change to SELinux policy
Change-Id: I45d6d6ab0538b9d4768b922cfdc2c972272d0b18

am: 228e342c

Change-Id: Ie6f7398497594f052e633c59621078723f88e21a

am: a2aab1c0

Change-Id: I1d4803a4c71472f752f0be2dc80d108a14c808d9

am: f83bc221

Change-Id: Iebdc9236eb679672d6518d811cc80e4336c8ed6b

am: 937be2b4

Change-Id: I39dcb15e40757ff4340f2c1996e09a1c8f0e1c58

am: 77fb2b86

Change-Id: Iac214dc09c2790f6684b5ee2331cf2ce7bfd5ac3

am: 0d8be8c0

Change-Id: Iab3c784069450d7021b7baf12bd0e16b23296d2f

am: fb5495e1

Change-Id: I02acb1fbb2cfaec2ce86ef1b485c0f97d1cf26dd

am: 2b2c74f8

Change-Id: I00841b24d684efe788e7794038f98da55d4c75e9