am: 6b3ef921

Change-Id: Iefc3436c532f5f291345e3d01a1cbe175d69e619

am: 5ee08053

Change-Id: I530872c3d9a8ddf5a03353b27e75ea1043cd2ab2

am: dddbd2f3

Change-Id: I517d7bbd415e28d2ba7719f17c1ddcc7c28f20a0

am: 3d8dde0e

Change-Id: I19cb50ee62d217f025bb7fcf535257dac3b3610e

Commit https://android.googlesource.com/kernel/common/+/f0ce0eee added
CAP_SYS_RESOURCE as a capability check which would allow access to
sensitive /proc/PID files. However, in an SELinux based world, allowing
this access causes CAP_SYS_RESOURCE to duplicate what CAP_SYS_PTRACE
(without :process ptrace) already provides.

Use CAP_SYS_PTRACE instead of CAP_SYS_RESOURCE.

Test: Device boots, functionality remains identical, no sys_resource
denials from system_server.
Bug: 34951864
Bug: 38496951
Change-Id: I04d745b436ad75ee1ebecf0a61c6891858022e34
(cherry picked from commit 44866954)

am: 429e71a6

Change-Id: Id9a9c60ac55405ab02cede5690431c3ceacd1dba

Bug: http://b/32123312
Test: mm && boot
Change-Id: I6550fbe2bd5f9f5a474419b483b0f786d4025e88

Merge commit 'adf210d6' into nougat-mr1-cts-dev am: 48c63657 am: f9181a2e
am: 0cab2a17

Change-Id: Ic542a2fdcdd0ac8b4408c74fbf60324e629cc699

am: f9181a2e

Change-Id: I46ffea21cccb896ef17d8434b009db263ba70e6e

am: 48c63657

Change-Id: I6e38561883d6a898cb0a719d10b6f2726a947354

nougat-mr1-cts-dev

(The change is already present as 320a0f54).

BUG: 33090058
Change-Id: I2451c334d3a1a42d2d5a46f8f6d22dc5d503f034

Bug: 31466840
Change-Id: I3984754034349e6c41de6ae9cccbaab95ca5a918
(cherry picked from commit a4567261)

Bug: 28672558
Test: Manual
Change-Id: Ibee6e7e52eb6ee285b9ca0a5507d515eb3c54c0e
(cherry picked from commit 2a57e77f)

am: cb4ecd26

Change-Id: I05d77c227ee1292eeae86d431b4ed7f5d69845bf

am: 8a54bd7f

Change-Id: Idd2020ed762067eeaf61fcbd625ce38505583e17

am: 250495a4

Change-Id: Ieb3b86e38a72f6b83ecd39e99a463c9b86e70a9d

am: 87a56541

Change-Id: I56c57b4a2e2ef71dd2eceb58a78c4e7e7628da00

/data/bugreports is moving to /bugreports

Bug: 27262109
Bug: 27204904
Bug: 32799236
Test: new symlink is in /bugreports and is labeled correctly

(cherry picked from commit d314376d)

Change-Id: Ia9aca3ff642b2171e9b0ece7c2b420a0d38006cc

(cherry picked from commit 59afa241)

Bug: 29748723
Change-Id: I4737a087f2d00e1028d1cb43d9eda814a008dbe8

recovery (update_binary) may need to set up cpufreq during an update.

avc:  denied  { write } for  pid=335 comm="update_binary" name="scaling_max_freq" dev="sysfs" ino=7410 scontext=u:r:recovery:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=0

Bug: 32463933
Test: Build a recovery image and apply an OTA package that writes to
      /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq.

Change-Id: Ia90af9dd15e162dd94bcd4722b66aa296e3058c5
(cherry picked from commit ee7960c0)

allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 am: c6c8da37 am: f43135fd am: b2930607
am: bc1b4c03

Change-Id: Idc427ee345bc28bfc7a36d018dd102278c610d77

allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 am: c6c8da37 am: f43135fd
am: b2930607

Change-Id: I7ab37535f7a471712e5511dc0917cbf68bb7a1d5

allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 am: c6c8da37
am: f43135fd

Change-Id: Ia01ca88536362fe910808f33a445fc5c8c54b77f

am: c6c8da37

Change-Id: I2dcb374609183a4460891c936757319d91064682

am: adf210d6

Change-Id: I0386db7e81ed5e6a6c032adb1173163f45ad726e

am: 0f81e066

Change-Id: I32529d2b8ad064f41d357f35b15c9acd31381bee

am: 7a393427

Change-Id: Ia78328cffdba927301761e99174533623a6c1966

Change-Id: Ia938d73b1a49b9ba4acf906df37095d21edee22e

Ignore, as it's a side effect of mounting /vendor.

Bug: 31116514
Change-Id: If94a27a26181e40de5c5e60f5446de9ce2ccdba0

(cherry picked from commit e123f061)

BUG: 31828706
BUG: 30832947

Change-Id: Icd5117d655f1197524b39fe7bc1b11c4d920093c
(cherry picked from commit c78db969)

am: f781f952

Change-Id: If31aa1ecf8dae506d7e556702f3ca08d0efdabc9

am: 21d78e0f

Change-Id: I2f9829077cf1f48b718afefc4d7d35f92d6e73b9

am: c6effa90

Change-Id: Id257877621b9375bca7d32e68d90c7a5c2a91f5d

am: 63c7ad6e

Change-Id: I5b9383b4c50d2eecd995db6943a0a27e50fb6fdd

Bug: 23113288
Change-Id: I123e5d40955358665800fe3b86cd5f8dbaeb8717

Allow bootanim process to access audioserver service.

Bug: 31651778
Change-Id: I5bec8812877792b1df3b37dddc5ccea3b243f5c4

am: d0561efe

Change-Id: Id1537bf36a218f3727caef36659a40087c19feb9

This allows the ConnectivityMetrics app to dump connmetrics service
metrics.

Bug: 31254800
Change-Id: I4c3da8cc80a5820dbed9843badc1464f3ae40581

am: 5ed3131e

Change-Id: Idd271962226c30a157c1b04f6ee3c56afe1f7f28