Note: The existing rules allowing socket communication will be removed
once we  migrate over to HIDL completely.

Bug: 34603782
Test: Able to connect to wifi networks.
Test: Will be sending for full wifi integration tests
(go/wifi-test-request)
Change-Id: I9ee238fd0017ec330f6eb67ef9049211f7bd4615

am: 409bcf8c

Change-Id: I755e1d81dbd5abeb8ca7aeb3967474e0b73e2629

am: 797163db

Change-Id: Ifbdf3e912c7128cb79ca3714d4951b186babc7c8

am: a64b6850

Change-Id: I7724ba18bd6d8d6ae7d4f87986de9200cb5bc761

When clearing cache, installd should be able to search for and delete
files in /data/preloads/file_cache

Test: Manually trigger installd freeCache
Bug: 31008665
Change-Id: I4c345cc8b0f7a6a8702a55f4720d21283c9d502a

am: 2b5c1d91

Change-Id: Ic376f6d05c99e41de124463af6ebf2af2114fb0f

am: 6cb56cc4

Change-Id: I3e01853c5efc95cc8c4590a67094eeb5072dea8f

am: 38dc1e22

Change-Id: If47397bdc5dc7e488b6e6e1dcac059a6e6389f29

Merge "init: allow init to restorecon on block devices and their symlinks" am: 2e934f7f am: 4afe2e28
am: ccead992

Change-Id: I628a999694aa3bbb70a4263a61d977c85d62cb45

am: 4afe2e28

Change-Id: I3be985c26ba95bb8d8a44084a918bf6714d4ed6c

am: 2e934f7f

Change-Id: I15baf398a01b12873be7da5623c2a9cbf9908fb0

This switches Keymaster HAL policy to the design which enables us to
conditionally remove unnecessary rules from domains which are clients
of Keymaster HAL.

Domains which are clients of Keymaster HAL, such as keystore and vold
domains, are granted rules targeting hal_keymaster only when the
Keymaster HAL runs in passthrough mode (i.e., inside the client's
process). When the HAL runs in binderized mode (i.e., in another
process/domain, with clients talking to the HAL over HwBinder IPC),
rules targeting hal_keymaster are not granted to client domains.

Domains which offer a binderized implementation of Keymaster HAL, such
as hal_keymaster_default domain, are always granted rules targeting
hal_keymaster.

Test: Password-protected sailfish boots up and lock screen unlocks --
      this exercises vold -> Keymaster HAL interaction
Test: All Android Keystore CTS tests pass -- this exercises keystore ->
      Keymaster HAL interaction:
      make cts cts-tradefed
      cts-tradefed run singleCommand cts --skip-device-info \
      --skip-preconditions --skip-connectivity-check --abi arm64-v8a \
      --module CtsKeystoreTestCases
Bug: 34170079

Change-Id: I2254d0fdee72145721654d6c9e6e8d3331920ec7

am: 4c71423e

Change-Id: I3affd2da7a7b3315b3e719ce0cf88424c53d1908

am: 9ec226df

Change-Id: I8c966360f4d7b28e5b4fe60739bd36737a601db8

am: 0aca0241

Change-Id: Ieceee81236f8fa5d7d2bb328274b7e91c11fbae1

am: 9d8dff3c

Change-Id: I347d13fa5d4a1bb3a9c893afacd12d51428e839f

am: 9fa01919

Change-Id: I8625aca8f8c8e925585afd84822680e9e0d812ec

am: 5a2de627

Change-Id: I960ee43281da8c8c6b0ec68bbea2ac53f43ab457

This switches Wi-Fi HAL policy to the design which enables us to
conditionally remove unnecessary rules from domains which are clients
of Wi-Fi HAL.

Domains which are clients of Wi-Fi HAL, such as system_server domain,
are granted rules targeting hal_wifi only when the Wi-Fi HAL runs in
passthrough mode (i.e., inside the client's process). When the HAL
runs in binderized mode (i.e., in another process/domain, with clients
talking to the HAL over HwBinder IPC), rules targeting hal_wifi are
not granted to client domains.

Domains which offer a binderized implementation of Wi-Fi HAL, such as
hal_wifi_default domain, are always granted rules targeting hal_wifi.

Test: Setup Wizard (incl. adding a Google Account) completes fine with
      Wi-Fi connectivity only
Test: Toggle Wi-Fi off, on, off, on
Test: Use System UI to see list of WLANs and connect to one which does
      not require a password, and to one which requries a PSK
Test: ip6.me loads fine in Chrome over Wi-Fi
Bug: 34170079

Change-Id: I7a216a06727c88b7f2c23d529f67307e83bed17f

am: 82b02338

Change-Id: I6bbe28f12e9d72c5d01691b0ba7bf229ee9378d5

am: ade5c284

Change-Id: Ic0b15caac14587bb6a6326ca53f956c78188b42a

am: 20b8d6b9

Change-Id: I8d3fe3a79791560669be031c790cd3862fb8782b

Bug: 35657600
Test: user build of Marlin starts with BT
Change-Id: Ic2380da66467b9b1c385da7d7fa10fddf4c7fae1

am: f2c2bd94

Change-Id: Ibad3def8f3a226a0f94a0cd506511f83f1c4e9fc

am: 872ff684

Change-Id: Ic4e4cd105af65b5ee7c0adfb62f851bff55fed70

am: 706bb202

Change-Id: I0f2169981c80769e85c686f637135097e2d74f56

The 'overlay' service is the Overlay Manager Service, which tracks
packages and their Runtime Resource Overlay overlay packages.

Change-Id: I897dea6a32c653d31be88a7b3fc56ee4538cf178
Co-authored-by: Martin Wallgren <martin.wallgren@sonymobile.com>
Signed-off-by: Zoran Jovanovic <zoran.jovanovic@sonymobile.com>
Bug: 31052947
Test: boot the Android framework

am: b58ec714

Change-Id: I8334bd1c5d52366445b0edbce7c90d8e90c4c299

am: 2c99c9ff

Change-Id: Ic11f3abd6b27769ac1c77af0530cec6b4702d911

am: 2f348392

Change-Id: Ia375e92fac568547c44adc42090843ad9ba7eb9f

This switches Dumpstate HAL policy to the design which enables us to
conditionally remove unnecessary rules from domains which are clients
of Dumpstate HAL.

Domains which are clients of Dumpstate HAL, such as dumpstate domain,
are granted rules targeting hal_dumpstate only when the Dumpstate HAL
runs in passthrough mode (i.e., inside the client's process). When the
HAL runs in binderized mode (i.e., in another process/domain, with
clients talking to the HAL over HwBinder IPC), rules targeting
hal_dumpstate are not granted to client domains.

Domains which offer a binderized implementation of Dumpstate HAL, such
as hal_dumpstate_default domain, are always granted rules targeting
hal_dumpstate.

Test: adb bugreport
Test: Take bugreport through system UI
Bug: 34170079

(cherry picked from commit 47174e3b)

Change-Id: I3e827534af03cdfa876921c5fa4af3a53025ba27

This switches Dumpstate HAL policy to the design which enables us to
conditionally remove unnecessary rules from domains which are clients
of Dumpstate HAL.

Domains which are clients of Dumpstate HAL, such as dumpstate domain,
are granted rules targeting hal_dumpstate only when the Dumpstate HAL
runs in passthrough mode (i.e., inside the client's process). When the
HAL runs in binderized mode (i.e., in another process/domain, with
clients talking to the HAL over HwBinder IPC), rules targeting
hal_dumpstate are not granted to client domains.

Domains which offer a binderized implementation of Dumpstate HAL, such
as hal_dumpstate_default domain, are always granted rules targeting
hal_dumpstate.

Test: adb bugreport
Test: Take bugreport through system UI
Bug: 34170079
Change-Id: I3e827534af03cdfa876921c5fa4af3a53025ba27

Bug: 35632346
Test: build and boot aosp_marlin
Change-Id: Ia2d019b0160e9b512f3e3a70ded70504fe4fea0c