Change-Id: I555361d732b8f1bdc90c231a3183a85526a5a558

* commit 'e693ed7c':
  Remove the su domain from -user builds.

* commit '16820182':
  Expand insertkeys.py script to allow union of files.

* commit 'e69552ba':
  Revert "Revert "Various minor policy fixes based on CTS.""

Change-Id: I86f2f28f7c558b8e9a70e5aa9ebcfa8bf26f9ef7

* commit '65d4f44c':
  Various policy updates.

This reverts commit ba84bf1d

Hidden dependency resolved.

Change-Id: I9f0844f643abfda8405db2c722a36c847882c392

Allow script to union mac_permissions.xml files
specified using the BOARD_SEPOLICY_DIRS and
BOARD_SEPOLICY_UNION constructs.

Change-Id: I4fc65fd1ab4c612f25e966f030247e54a270b614
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Assortment of policy changes include:
 * Bluetooth domain to talk to init and procfs.
 * New device node domains.
 * Allow zygote to talk to its executable.
 * Update system domain access to new device node domains.
 * Create a post-process sepolicy with dontaudits removed.
 * Allow rild to use the tty device.

Change-Id: Ibb96b590d0035b8f6d1606cd5e4393c174d10ffb
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

* commit 'bf539bf3':
  Fix makefile error with ANDROID_BUILD_TOP

* commit 'edf7b4c8':
  Revert "Revert "Revert "Revert "Dynamic insertion of pubkey to mac_permissions.xml""""

This reverts commit 60d4d71e

This should (finally) be fixed in https://android-review.googlesource.com/#/c/54730/

Change-Id: I3dd358560f7236f28387ffbe247fc2b004e303ea

Use TOP instead of ANDROID_BUILD_TOP

Fix spelling issues in keys.conf

Change-Id: Ib90b3041af5ef68f30f4ab78c768ad225987ef2d

* commit '60d4d71e':
  Revert "Revert "Revert "Dynamic insertion of pubkey to mac_permissions.xml"""

This reverts commit cd4104e8

This builds clean locally, but seems to explode on the build servers. Reverting until there's a solution.

Change-Id: I09200db37c193f39c77486d5957a8f5916e38aa0

* commit '82fe3d24':
  Revert "Rewrite mac_permissions.xml file."

This reverts commit b24c30b4

Reverting the changes that depend on insertkeys until the issues there are resolved.

Change-Id: Ie7e0d6657d8e7cfb44fc3efa2f99c8d1011a0fe1

* commit '1620c671':
  Introduce security labels for 2 new device nodes.

* commit 'b24c30b4':
  Rewrite mac_permissions.xml file.

* commit 'cd4104e8':
  Revert "Revert "Dynamic insertion of pubkey to mac_permissions.xml""

Rewrite all stanzas to only include seinfo tags.

Change-Id: I4d528ce092ec8d1aac15195ed3a8e307d604607e
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

This reverts commit 1446e714

Hidden dependency has been resolved.

Change-Id: Ia535c0b9468ea5f705dff9813186a7fa8bab84ae

iio: Industrial I/O subsystem
usb_accessory: accessory protocol for usb

Allow system access in both cases.

Change-Id: I02db9775ec2ddaaeda40fae6d5e56e320957b09c
Signed-off-by: Robert Craig <rpcraig@tycho.ncsc.mil>

* commit 'c3295802':
  New users need a wallpaper_file type.

* commit 'eee138c2':
  Allow zygote to search tmpfs.

* commit '41e53901':
  New dev_types and other minor adjustments.

Change-Id: I7ff4ed9f73f43918cac05a026af68cca8dbe02c3
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

* commit '905e316d':
  Make ion_device mls trusted.

Change-Id: Ib0bdcbc1a7e45e1d1a046c9fa8aff89183ebfe0d

Add new dev_type:
- ump_device : Unified Memory Provider driver.
       The file_contexts entry should be
       described on a per device basis.

Minor adjustments:
- tee needs netlink socket access.
- ueventd needs to grant file operations.

Change-Id: I915304da687d3a2b9aa417e6f91ea915bd697676
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

Allow device node access irrespective
of MLS restrictions. Third party apps
(untrusted_app) domains need access too.

Change-Id: I132b8201bccb1ff31dc0c15a735f81f645c9836d

* commit '18b5f87e':
  racoon policy.

Initial policy for racoon (IKE key management).

Signed-off-by: Robert Craig <rpcraig@tycho.ncsc.mil>
Change-Id: If1e344f39ea914e42afbaa021b272ba1b7113479

* commit 'dbb82fd8':
  Revert "Various minor policy fixes based on CTS."