BUG: 35443510
Change-Id: I2558fb80234e145c13ccb7a51859f2a5fd2e0324

Bionic has both of these functions; their redeclarations break our
new-style FORTIFY.

Bug: 32073964
Test: Builds with new FORITFY
Change-Id: Ia6e43117012dc83f6f11ae78a74bb1f4b07c75fc

Change-Id: I6af95c2554f5e7864df23055f5ab71d8a9741dbf

The #define in config.h for __sentinel__ is incorrect and doesn't
handle __attribute__((__sentinel__(1))). Since we have the attribute,
just turn it on.

Change-Id: Ifaced8170a274d2d0e527f892986795aaffedb69

Later branches will not support GLOBAL_CFLAGS.
This change turns on account mapping for all Android builds.
It allows SSHDIR to be set in BoardConfig.mk

Bug: 29277511

Change-Id: Ic1411b97468d61a919763db6d42253fdf148df79

Change-Id: Ib55641f13703a3e91c86def7330ff2280ec2afac
(cherry picked from commit db0dfa13e95a9655ee0480dec821ae2a06e9bd52)

global clfags are not supported so this is moving
from device/google/gce_x86/BoardConfig.mk

Change-Id: Ifc519a1de4b4be7ae50c21254a99c90bd92bc911

BUG: 26940969

Change-Id: I8e39cdecbbef4499f72d305132adac86f3532682

am: 9e6d3e1c

* commit '9e6d3e1c':

am: ce6947cd

* commit 'ce6947cd':

makes certain libcrypto implementations cache a /dev/urandom fd in preparation of sandboxing. am: 7d4e4745
am: cfd2979a

* commit 'cfd2979a':

am: 4190e548

* commit '4190e548':

am: f30df80d

* commit 'f30df80d':

am: 4b43e83b

* commit '4b43e83b':

am: 360b2521

* commit '360b2521':

am cfb649f1: remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before). am: d44994fb
am: d7d954c2

* commit 'd7d954c2':

remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before). am: 0c94e12d
am: f726381d

* commit 'f726381d':

am: 61e0286d

* commit '61e0286d':

am: 1cb86094

* commit '1cb86094':

am: 9e995143

* commit '9e995143':

am: 9c3b157d

* commit '9c3b157d':

am: ab28f549

* commit 'ab28f549':
  forcibly disable roaming support in the client

am: b41c2ea3

* commit 'b41c2ea3':

am: 7d4e4745

* commit '7d4e4745':
  makes certain libcrypto implementations cache a /dev/urandom fd in preparation of sandboxing.

am: 245f53db

* commit '245f53db':
  Add metadata needed for vomit.

am: 95194cb2

* commit '95194cb2':
  Map unknown users to shell for Android GCE.

am: 3337c706

* commit '3337c706':
  Make the sshd directory configurable

am: 0199da83

* commit '0199da83':
  Don't chmod /dev/ptmx when allocating a pty on Android.

am cfb649f1: remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).
am: d44994fb

* commit 'd44994fb':

remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).
am: 0c94e12d

* commit '0c94e12d':
  remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).

am: 994dea3d

* commit '994dea3d':
  Use linux/capability.h in jb-mr1 too

am: b66687b3

* commit 'b66687b3':
  capability used to be under linux, not system

am: bf4d7974

* commit 'bf4d7974':
  Revert "Removed an unused header include"

am: b5de6ef9

* commit 'b5de6ef9':
  Removed an unused header include

ssh client security bug fix from
http://www.openssh.com/txt/release-7.1p2

openssh client is installed in gce instances.
although it's private key is not that much sensitive
it's better to land this security patch than not.

reported initially as cve-2016-0777 and cve-2016-0778
(January 14th, 2016)

BUG: 26587626
Change-Id: I113d576a3522ded8cb0f4a2e117999b0c51d4364

am: 7b8b4a6e

* commit '7b8b4a6e':
  Stop relying on global GCE_PLATFORM_SDK_VERSION

COMMON_GLOBAL_CFLAGS is being locked down. Instead, define it in the
LOCAL_CFLAGS where it is needed.

Bug: 26165350
Change-Id: Icd3e79c1f9439d7c32762cb51f66db5479750f40

in preparation of sandboxing.

Upstream patch is:

https://anongit.mindrot.org/openssh.git/patch/?id=07889c75926c040b8e095949c724e66af26441cb

BUG=25695426

Change-Id: I0f746c30e31e7d938c70bcebe402f472c4649919