am: e1801fa7

Change-Id: Ib4d19a23e1674361b07a03be65b5ba5bb94a51f0

am: cdc68c65

Change-Id: I7a2898cbbb77d8c2b88c50617e373423df13fe56

am: eb584363

Change-Id: I6b42246d7ab2a7864adcfb39324a04732c2be686

am: 9047a4de

Change-Id: I92c96aee077c2e3e6b84a6382d003fa7a1dc0b44

This allows for more native modes.

Bug: 73824924
Test: adb shell setprop persist.sys.sf.native_mode 2
Change-Id: Iffdeadc8dc260de4b0c7f2b46aab08d64d25e3b1

This should help fix presubmit tests.

Bug: 77634061
Test: Built policy.
Change-Id: Ib9f15c93b71c2b67f25d4c9f949a5e2b3ce93b9c
(cherry picked from commit c6b5a96b)

am: 4af9448a

Change-Id: I1f178435ae86b871b29e9cfa3c3547b28c72b5be

am: c9523bd4

Change-Id: I3194c759039d08fe8b1f08f37ddcebab67626327

am: db465285

Change-Id: Icd5639ebae411b2c6e6acaf0db143794351dcb1c

This addresses the following denials:

avc: denied { fowner } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:r:vold_prepare_subdirs:s0 tclass=capability
avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:storaged_data_file:s0 tclass=file
avc: denied { relabelfrom } for comm="vold_prepare_su" name="storaged" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=dir
avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=file

Bug: 77875245
Test: Boot device.
Test: Mislabel directories used by vold_prepare_subdirs, reboot, and
ensure it can relabel them without denials.
Test: Add user, reboot, delete user, reboot, observe no denials.

(cherry picked from commit 855dd5a8)

Merged-In: Id67bc99f151a6ccb9619bbfb7080452956405121
Change-Id: Ic86be1e1afed37602255448e5700811d197403f9

Vendors may use this to write custom messages to their bootloader, and
as the bootloader is under vendor control, this makes sense to allow.

Bug: 77881566
Test: build
Change-Id: I78f80400e5f386cad1327a9209ee1afc8e334e56

am: a11b16c9  -s ours

Change-Id: Iae27852448e18a91049b26b12dd3e958faa23858

am: 21026c55

Change-Id: If61c950aad21beb7887f4fc833c27906624abc1e

am: 224921d1

Change-Id: I9ea2472151f97653fabbecfad13c0299f30f671b

Values of the following properties are set by SoC vendors on some
devices including Pixels.
- persist.bluetooth.a2dp_offload.cap
- persist.bluetooth.a2dp_offload.enable
- persist.vendor.bluetooth.a2dp_offload.enable
- ro.bt.bdaddr_path
- wlan.driver.status

So they should be whitelisted for compatibility.

Bug: 77633703
Test: succeeded building and tested with Pixels
Change-Id: Ib2b81bcc1fd70ddd571dc7fb2b923b576d62b7d5
Merged-In: Ib2b81bcc1fd70ddd571dc7fb2b923b576d62b7d5
(cherry picked from commit 224921d1)

Values of the following properties are set by SoC vendors on some
devices including Pixels.
- persist.bluetooth.a2dp_offload.cap
- persist.bluetooth.a2dp_offload.enable
- persist.vendor.bluetooth.a2dp_offload.enable
- ro.bt.bdaddr_path
- wlan.driver.status

So they should be whitelisted for compatibility.

Bug: 77633703
Test: succeeded building and tested with Pixels
Change-Id: Ib2b81bcc1fd70ddd571dc7fb2b923b576d62b7d5

[automerger skipped] Merge "Allow vendor-init-readable for sys.boot_completed and dev.bootcomplete" am: 362f7d6b
am: 4a1af197  -s ours

Change-Id: Icc06e8943cf2d75892caa28e50703cca056df968

am: 362f7d6b

Change-Id: I16cb153698c0c924bc0f2051acf9c06c1384e517

am: cb336d89

Change-Id: Ic11ec1e173d97fc24730520e741806bf164564f7

Denials:
04-12 12:42:47.795   903   903 W traced_probes: type=1400 audit(0.0:5684): avc: denied { search } for name="1376" dev="proc" ino=204553 scontext=u:r:traced_probes:s0 tcontext=u:r:untrusted_app_27:s0:c512,c768 tclass=dir permissive=0
04-12 12:42:47.795   903   903 W traced_probes: type=1400 audit(0.0:5685): avc: denied { search } for name="1402" dev="proc" ino=204554 scontext=u:r:traced_probes:s0 tcontext=u:r:platform_app:s0:c512,c768 tclass=dir permissive=0
04-12 12:42:47.801   903   903 W traced_probes: type=1400 audit(0.0:5686): avc: denied { search } for name="1496" dev="proc" ino=204557 scontext=u:r:traced_probes:s0 tcontext=u:r:untrusted_app:s0:c85,c256,c512,c768 tclass=dir permissive=0
04-12 12:42:47.805   903   903 W traced_probes: type=1400 audit(0.0:5687): avc: denied { search } for name="1758" dev="proc" ino=204563 scontext=u:r:traced_probes:s0 tcontext=u:r:priv_app:s0:c512,c768 tclass=dir permissive=0

Bug: 77955286

Change-Id: If0985d3ddd7d14c2b139be1c842c9c8df99b90db

am: a3d199dd  -s ours

Change-Id: I09cf25b52e7c15b57e8a103d43b468dcef466154

am: 45c72ddf

Change-Id: Iad601fb52e9e145b1a2729a37867de40556d9d3a

Bug: 75987246
Test: succeeded builing and tested with taimen
Change-Id: I2d8bc91c305e665ed9c69459e51204117afb3eee
Merged-In: I2d8bc91c305e665ed9c69459e51204117afb3eee
(cherry picked from commit ac2e4cce)

am: 96805f15

Change-Id: I862b984b3f7508406183709fffda803284aade3e

am: ac2e4cce

Change-Id: I595507e45f563ae0ecfb07e842f446a34b3e3446

am: e63f0e9c

Change-Id: Ib6b1721b59b6df2944584a3236076885c9218930

am: e0163411

Change-Id: I32f6cd37506d4e6f6feb73c6d1b2eabcdb4988b3

Bug: 75987246
Test: succeeded builing and tested with taimen
Change-Id: I2d8bc91c305e665ed9c69459e51204117afb3eee

am: 1382984c

Change-Id: Icc3cd3d88873627f93cb59f69083b0c68f1a51ea

Addresses:
avc: denied { find } for
interface=android.hardware.tetheroffload.config::IOffloadConfig
scontext=u:r:system_server:s0
tcontext=u:object_r:default_android_hwservice:s0
tclass=hwservice_manager

Bug: 77855688
Test: build/boot Sailfish, turn on tethering, no selinux denial
Change-Id: I97cae0928b5311a4da41d19cbd5c863c3137a49f
(cherry picked from commit 3a346ea7)

am: 45b4704e

Change-Id: I29d90373b7cc4350244c81f9a5b24c31453d987d

am: 2e532d40

Change-Id: I7cd5f36005f7e5c26384525a038b54dac87294bd