BUG: 26940969

Change-Id: I8e39cdecbbef4499f72d305132adac86f3532682

am: 9e6d3e1c

* commit '9e6d3e1c':

am: ce6947cd

* commit 'ce6947cd':

makes certain libcrypto implementations cache a /dev/urandom fd in preparation of sandboxing. am: 7d4e4745
am: cfd2979a

* commit 'cfd2979a':

am: 4190e548

* commit '4190e548':

am: f30df80d

* commit 'f30df80d':

am: 4b43e83b

* commit '4b43e83b':

am: 360b2521

* commit '360b2521':

am cfb649f1: remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before). am: d44994fb
am: d7d954c2

* commit 'd7d954c2':

remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before). am: 0c94e12d
am: f726381d

* commit 'f726381d':

am: 61e0286d

* commit '61e0286d':

am: 1cb86094

* commit '1cb86094':

am: 9e995143

* commit '9e995143':

am: 9c3b157d

* commit '9c3b157d':

am: ab28f549

* commit 'ab28f549':
  forcibly disable roaming support in the client

am: b41c2ea3

* commit 'b41c2ea3':

am: 7d4e4745

* commit '7d4e4745':
  makes certain libcrypto implementations cache a /dev/urandom fd in preparation of sandboxing.

am: 245f53db

* commit '245f53db':
  Add metadata needed for vomit.

am: 95194cb2

* commit '95194cb2':
  Map unknown users to shell for Android GCE.

am: 3337c706

* commit '3337c706':
  Make the sshd directory configurable

am: 0199da83

* commit '0199da83':
  Don't chmod /dev/ptmx when allocating a pty on Android.

am cfb649f1: remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).
am: d44994fb

* commit 'd44994fb':

remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).
am: 0c94e12d

* commit '0c94e12d':
  remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).

am: 994dea3d

* commit '994dea3d':
  Use linux/capability.h in jb-mr1 too

am: b66687b3

* commit 'b66687b3':
  capability used to be under linux, not system

am: bf4d7974

* commit 'bf4d7974':
  Revert "Removed an unused header include"

am: b5de6ef9

* commit 'b5de6ef9':
  Removed an unused header include

ssh client security bug fix from
http://www.openssh.com/txt/release-7.1p2

openssh client is installed in gce instances.
although it's private key is not that much sensitive
it's better to land this security patch than not.

reported initially as cve-2016-0777 and cve-2016-0778
(January 14th, 2016)

BUG: 26587626
Change-Id: I113d576a3522ded8cb0f4a2e117999b0c51d4364

am: 7b8b4a6e

* commit '7b8b4a6e':
  Stop relying on global GCE_PLATFORM_SDK_VERSION

COMMON_GLOBAL_CFLAGS is being locked down. Instead, define it in the
LOCAL_CFLAGS where it is needed.

Bug: 26165350
Change-Id: Icd3e79c1f9439d7c32762cb51f66db5479750f40

in preparation of sandboxing.

Upstream patch is:

https://anongit.mindrot.org/openssh.git/patch/?id=07889c75926c040b8e095949c724e66af26441cb

BUG=25695426

Change-Id: I0f746c30e31e7d938c70bcebe402f472c4649919

Change-Id: I547bb616f1d1caeaf118a302fb9c8823fae1bb83

Change-Id: I5a1f2aaa9c6a7ed04b22d2a1e71c2573f324ceae

Change-Id: I01d674b9a2688f4a1d3e884c2f434bfaad06ac8b

This resolves an incompatibility with non-root adb.
BUG=22803455

Change-Id: I908923e9ddc04e0ec8de0122eb79486c8b1ae03e

am cfb649f1: remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).

* commit 'cfb649f1':
  remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).

remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).

Change-Id: I187386c699f22d80bac4c7f8c1e12ee5a590fb55
(cherry picked from commit 0c94e12d)

remove .gce_x86 suffix from ssh output files (post_install_cmd is not supported in jb-mr1 and before).

Change-Id: I187386c699f22d80bac4c7f8c1e12ee5a590fb55