am: 6b1597df

Change-Id: I91559d7b85962d9a728ac0862a338b5eb544be1f

am: 0808ea3a

Change-Id: I389b99a2032e33c3ac2d9dd4a2f4034caf76f220

am: 852aca05

Change-Id: I7897c5211de238b497fabd1fa89da3c4fb38909c

am: 3e21c5f1

Change-Id: I970e7ef889ce0ad8376a1fd98fa92c2f5eb8b613

am: 8c8994f5

Change-Id: I5327bcea18feabc38427948fcfa0e505846629e4

(This reverts internal commit: 82ca9c2e)
Test: None.

Change-Id: I97ffdd48b64ef5c35267387079204512a093a356

This CL was accidentally reverted a second time by commit:
cb5129f9.  Submit it for the third,
and final, time.

(cherry-pick of 5637587d
which was in AOSP and internal master but not stage-aosp-master)

Bug: 62102757
Test: Builds and boots.
Change-Id: I0394907e808c737422e644aec452baa3e777cf6f

am: 8c06c171  -s ours

Change-Id: Ia6c5fa13e253c41fb42ab0034977695baea34406

am: 2aa045f1

Change-Id: Id94738ab2036d39a7eefbf0679d68f1790437883

Also add missing commit: ca595e11

Test: I solemnly swear I tested this conflict resolution.
Change-Id: I2a210c3b58565a40117bf3d061e9bf904ed687c2

am: f8e09172

Change-Id: I225f40d2ae0fb451634911677a78bf96df73bb54

type=1400 audit(0.0:6): avc: denied { read } for comm="Thread-5"
name="cache" dev="dm-0" ino=13 scontext=u:r:system_server:s0
tcontext=u:object_r:cache_file:s0 tclass=lnk_file permissive=0

Bug: 64067152
Bug: 65843095
Test: build
Change-Id: Ie90c0343a834aa87b7ded41f503e05d9b63b3244
(cherry picked from commit a4cada74)

Bug: 37916906
Test: Builds 'n' boots.
Change-Id: Ia1d86264446ebecc1ca79f32f11354921bc77668
Merged-In: I208ec6a864127a059fb389417a9c6b259d7474cb

am: 6b8088ba

Change-Id: Iaf031f4a9325910b675b1dcc053b408d2c8f2458

Particularly useful for suppressing selinux logspam for debug-only
permissions.

Bug: 65843095
Test: build, boot, and run tests on user and userdebug builds.
Change-Id: I18ce0b2cf1e96ca037e93309dddb476a150b677f

It's used in CTS neverallow tests.

Addresses:
Warning!  Type or attribute hal_cas_server used in neverallow
undefined in policy being checked.

Bug: 66910049
Test: build
Change-Id: Ia185f266fc1e3cb87c39939fdd45d02efa6c2c94
Merged-In: I1092aff40da9dcf09bd044400bedd1f549eb7e38

* changes:
  Remove mini_parser target
  Move python scripts to python_binary_host build rule

It's already included in srcs for treble_sepolicy_tests.

Bug: 65263013
Test: build
Change-Id: I208ec6a864127a059fb389417a9c6b259d7474cb
(cherry picked from commit b67c757c)

Fixes: 65263013
Test: build
Merged-In: I0ec412481c5990927fcbee7c4303bee2da876210
Change-Id: I0ec412481c5990927fcbee7c4303bee2da876210
(cherry picked from commit 5c5e79cd)

am: 46c99592  -s ours

Change-Id: I01523bb7088fddd44ec86bfd90eb89f31762eb76

am: 5d8b059f  -s ours

Change-Id: Ief5922025337d02cb5bf1fc6805c5c4b5de194d8

am: f6081348

Change-Id: If4ce96dc67f8681379d6ab04340be32d64520504

am: 6922dfe3

Change-Id: I366e2005f554ad2b98aeff4a7c83521ad74d12bd

Fixes: 65263013
Test: build
Merged-In: I0ec412481c5990927fcbee7c4303bee2da876210
Change-Id: I0a5b9a80e988fcd16a29807ed83b2c65bba9000f

These are no longer necessary as domain_deprecated has been
removed in AOSP master.

Bug: 66749762
Test: build
Merged-In: I99953ecc7d275fdbe8e56d8f47a27d1f9e1cc09a
Change-Id: I01878a4410f8cb3c97ff96c67845dfaa7b0051ce

am: e9354cda

Change-Id: I330100bace90ebf5c4859c6577bf43ede1185b59

am: 16efc04d

Change-Id: I9615973f5b9eef7810c3cfb5469bd3ce8797c939

am: 4481b885

Change-Id: I3763d7f5ce22ff43e2adb8f7125e789f2c061e9e

Run-as is running a command under an app's uid and in its data
directory. That data directory may be accessed through a symlink
from /data/user. So give runas rights to read such a symlink.

Bug: 66292688
Test: manual
Test: CTS JVMTI tests
Change-Id: I0e0a40d11bc00d3ec1eee561b6223732a0d2eeb6

am: dfea667d

Change-Id: Ic835bf45ab8a2334bdeec6540678d73dddfffa6d

am: dfdb9628

Change-Id: I2abe6f86bbb099e044fa49074fa28260c3e5f8ba

am: 3b24ce50

Change-Id: Ibfe45f0105811e120f4e83a52f3ba8e4d6b2fb10

am: 1373b2fe  -s ours

Change-Id: I5f6baddfe13696b4cb088f5ede32032d86705727

am: bbd7ddaf

Change-Id: I60b634911abc7598141cbe4a3cd913b6ba832b5c

am: 46f41134

Change-Id: Idfb71caeb839cce156bfa181fa53339e2e791e4b

The following commits were cherry-picked from internal master to AOSP,
but to avoid merge-conflicts we'll do a large diff instead of individual
cherry-picks:
521742e9
9aefc916
3686efca
de51e7de
fff3fe2f

Bug: 37916906
Test: angler builds and boots.
Merged-In: Ie010cc12ae866dbb97c387471f433158d3b699f3
Change-Id: I5126ebe88b9c76a74690ecf95851d389cfc22d1f