am: 0fe95b32

* commit '0fe95b32':
  Remove tee_device access from mediaserver

Change-Id: I38812bf082ab40fb5233b5e6db416aa5be80218f

am: 93330770

* commit '93330770':
  Remove tee_device access from mediaserver

Change-Id: I845fc682c4fb86acb9acef700c0aed7415cee6e9

am: 0e1153ec

* commit '0e1153ec':
  Remove tee_device access from mediaserver

Change-Id: I23490556a7b0b3d9a5038ff2e1b0a6f384f629ec

am: 12c58e29

* commit '12c58e29':

Change-Id: If7e83bd1a45d4fb4acecbe856e779dcbd8c3e78e

am: cffd143e

* commit 'cffd143e':

Change-Id: I1695e3c40a817aa9e3e107107a9982278049eff9

am: 92eece4b

* commit '92eece4b':
  Allow mediaserver to read preloads_data_file

Change-Id: I5efc74e0ad87ceda67b8286623f0538206e49723

am: a40df202

* commit 'a40df202':
  Allow mediaserver to read preloads_data_file

Change-Id: Ia02ce6effd43f7e92590553dedb0be81ffcb36a9

am: d875ab61

* commit 'd875ab61':
  Allow mediaserver to read preloads_data_file

Change-Id: Ia974cd2351bbebb354273816bc9693eb97a60f41

am: d875ab61

* commit 'd875ab61':
  Allow mediaserver to read preloads_data_file

Change-Id: Ib34a273c717498542d8dd197f9a2f20e674d3ce9

SetupWizard initiates video playback using MediaPlayer API. Media server
should be able to handle preloads file descriptors

Bug: 28855287
Change-Id: I529dd39b25b852787b3d1708a853980cf382f045

Bug: 22775369
Change-Id: Iae362fcc371bab1455dda733f408f005c7eec3f8

am: 0f283dee

* commit '0f283dee':

Change-Id: Idc7d5d1ee70d42bc2943d306f645362e932ac107

am: 6107d75c

* commit '6107d75c':
  SELinux policies for /data/preloads directory

Change-Id: I8314aa396b57250b4779308bfe6be88cc91f36ce

am: e90f1586

* commit 'e90f1586':

Change-Id: I20836f7e680506fa6c61669c1ac9e30efb903115

am: 72f0fbb2

* commit '72f0fbb2':
  SELinux policies for /data/preloads directory

Change-Id: I0eb0aacd3bd5134077ef2bfbc9e5f418044043ab

am: 49ac2a3d

* commit '49ac2a3d':
  SELinux policies for /data/preloads directory

Change-Id: I3ce72279ba0a054527e860b8287c1a39e8d4fcfe

am: 49ac2a3d

* commit '49ac2a3d':
  SELinux policies for /data/preloads directory

Change-Id: Ib928cda316ef31f361ad09ef29b264eb9df754d5

A new directory is created in user data partition that contains preloaded
content such as a retail mode demo video and pre-loaded APKs.

The new directory is writable/deletable by system server. It can only be
readable (including directory list) by privileged or platform apps

Bug: 28855287
Change-Id: I3816cd3a1ed5b9a030965698a66265057214f037

This sepolicy change allows wificond to run as a deamon.

BUG=28865186
TEST=compile
TEST=compile with ag/1059605
  Add wificond to '/target/product/base.mk'
  Adb shell ps -A | grep 'wificond'

Change-Id: If1e4a8542ac03e8ae42371d75aa46b90c3d8545d

am: ccf9131c

* commit 'ccf9131c':
  Fix rild policy to accomodate minijail

Change-Id: I8d8e3f07534cf64f25e8bd3371f8c1a42385db40

am: ef502625

* commit 'ef502625':
  Fix rild policy to accomodate minijail

Change-Id: Ibd04bd5f94cbdd56107c8b3916cf31a0e52ced7b

am: d5bfe93e

* commit 'd5bfe93e':
  Fix rild policy to accomodate minijail

Change-Id: Id65ff798b13903242446c27406cda10f3e02dd99

am: e3327427

* commit 'e3327427':
  Fix rild policy to accomodate minijail

Change-Id: I6d4e487c07f9de821d11ebee8988fa6f79ff1b27

Fix denials related to lack of setgid and setpcap priviledges.
These were introduced when minijail was used to do sandboxing.

Bug: 28178548
Change-Id: I85fd4abbe55258de61d20d827baf59bbca0679e7
Test: rild no longer crash loops

am: a1f1c4a2

* commit 'a1f1c4a2':

Change-Id: I99acc4792b3ca8b667b599b736296d168730a6e2

am: 0bc35bd3

* commit '0bc35bd3':

Change-Id: Icd913a45dc2b66a50c7b75c86b512fdb63b99f8b

am: 9f65ee3d

* commit '9f65ee3d':
  sepolicy: broaden system_server access to foreign_dex_data_file{dir}.

Change-Id: I86686234288c58cce276ab6aa956a6b27094603a

am: 3f065aa8

* commit '3f065aa8':
  sepolicy: broaden system_server access to foreign_dex_data_file{dir}.

Change-Id: I73420b1e5b1140d216cebad865d14fd3899578ab

am: 13bdd39c

* commit '13bdd39c':
  sepolicy: broaden system_server access to foreign_dex_data_file{dir}.

Change-Id: I9e41715e443f233275252c6a4cb5cce904c45f9c

am: 13bdd39c

* commit '13bdd39c':
  sepolicy: broaden system_server access to foreign_dex_data_file{dir}.

Change-Id: I0dae8380087edcc8b67210160526dcc41a69b9e4

Merge "Add keys to prerequisites of mac_permissions.xml" am: d1eb0ede am: a8f65aa1 am: 2f7b0514
am: 402ff175

* commit '402ff175':
  Add keys to prerequisites of mac_permissions.xml

Change-Id: I8fbb05b9c00a2151be69ff6320ae3176420cec25

am: 2f7b0514

* commit '2f7b0514':
  Add keys to prerequisites of mac_permissions.xml

Change-Id: Iadc0100131dbc7c3aa6ec3a400d388b55eed6c97

am: a8f65aa1

* commit 'a8f65aa1':
  Add keys to prerequisites of mac_permissions.xml

Change-Id: I9b6f11e61f31ec6c11ec35283eff4936b66497f9

am: d1eb0ede

* commit 'd1eb0ede':
  Add keys to prerequisites of mac_permissions.xml

Change-Id: Iaaee3bfdb9d44bb1fd63f08a1c3f12c52ec9cefe

The system_server needs to clear these markers along with other app
data that it's responsible for clearing.

bug: 28510916
Change-Id: If9ba8b5b372cccefffd03ffddc51acac8e0b4649

am: 42f2a5f0

* commit '42f2a5f0':
  Fix misc-macro-parentheses warnings.

Change-Id: Idd6f76200073f986b1df43c9aa60e2d89599fb48

am: b077a756

* commit 'b077a756':
  Fix misc-macro-parentheses warnings.

Change-Id: Id30093c7a5ef204b81ff8d7c854e065b6da0bba2

am: ebb3dc9e

* commit 'ebb3dc9e':
  Fix misc-macro-parentheses warnings.

Change-Id: Id9658183b6cec0e5725c800d8939e57bf181c9e4