This adds fine-grained policy about who can register and find which
HwBinder services in hwservicemanager.

Test: Play movie in Netflix and Google Play Movies
Test: Play video in YouTube app and YouTube web page
Test: In Google Camera app, take photo (HDR+ and conventional),
      record video (slow motion and normal), and check that photos
      look fine and videos play back with sound.
Test: Cast screen to a Google Cast device
Test: Get location fix in Google Maps
Test: Make and receive a phone call, check that sound works both ways
      and that disconnecting the call frome either end works fine.
Test: Run RsHelloCompute RenderScript demo app
Test: Run fast subset of media CTS tests:
      make and install CtsMediaTestCases.apk
      adb shell am instrument -e size small \
          -w 'android.media.cts/android.support.test.runner.AndroidJUnitRunner'
Test: Play music using Google Play music
Test: Adjust screen brightness via the slider in Quick Settings
Test: adb bugreport
Test: Enroll in fingerprint screen unlock, unlock screen using
      fingerprint
Test: Apply OTA update:
      Make some visible change, e.g., rename Settings app.
      make otatools && \
      make dist
      Ensure device has network connectivity
      ota_call.py -s <serial here> --file out/dist/sailfish-ota-*.zip
      Confirm the change is now live on the device
Bug: 34454312
Change-Id: Iecf74000e6c68f01299667486f3c767912c076d3

am: b4f62b04  -s ours

Change-Id: Ia292d94402f2c0e46074aeb119867c6f470fc1ad

am: 14bb96f2

Change-Id: I7c9f2eae1ca88ac7aab960a3d8ddef7dace09c5c

am: 7f0c18b4

Change-Id: Ib764462e117579339bda41a6915b7216ffc0d947

am: d250a336

Change-Id: I81ff1d6a9651daeef66e1ea4e2a3c90bcf3e9bb6

rc-style powerctl has beem removed. Accordingly, asan_extract now
needs access to sys.powerctl directly.

Bug: 36458146
Test: m && m SANITIZE_TARGET=address SANITIZE_TARGET_SYSTEM=true
Change-Id: Ic65a858962b4b3dd613fdbfa09f93d21425bf892

am: f8a18d47

Change-Id: Iba5fd78ab1d578878cde958b489c57959ac6a290

Add asanwrapper support for system server under sanitization.

Bug: 36138508
Test: m && m SANITIZE_TARGET=address SANITIZE_LITE=true
Test: adb root && adb shell setprop wrap.system_server asanwrapper
Change-Id: Id930690d2cfd8334c933e0ec5ac62f88850331d0

am: 4f1763ef

Change-Id: I33c0dcab70613c0f0a669d0443332f204b92d55b

am: 456fa279

Change-Id: I440a08708ee39cd1c9f69432ca63e3b256e4f189

am: 67f40ec5

Change-Id: I9e364dd0493d8262739d255b4652a27bc313ede4

Bug: 37504387
Test: aaudio example write_sine, needs MMAP support
Change-Id: I7fbd87ad4803e8edbde4ba79220cb5c0bd6e85a0
Signed-off-by: Phil Burk <philburk@google.com>

Bug: 37485771
Test: sideloaded OTA through recovery on sailfish

Change-Id: I98bb4e0e919db585131391f57545f1a9a0096701
Signed-off-by: Sandeep Patil <sspatil@google.com>

am: 0189fb53

Change-Id: Ib6b2d736ed141f4623e3b1786d22189dd975ce0e

am: 4a55eada

Change-Id: I77d39fc8368a73f386a4ea28d0e9cc7e43c9df79

am: 5f22a4dd

Change-Id: I2e6160a22c850ddbf3fef6d1e3e6a82dcf18db89

am: 0b999249

Change-Id: I8ddae2a19e54d8dc896ea9efc1355019599ca4cb

The PackageManager now passes previous code paths to dex2oat as shared
libraries. dex2oat needs extra permissions in order to access and open
the oat files of these libraries (if they were compiled).

Part of a multi-project change.

Bug: 34169257
Test: cts-tradefed run singleCommand cts -d --module
CtsAppSecurityHostTestCases -t android.appsecurity.cts.SplitTests

(cherry-picked from commit 1103f963)

Change-Id: I3cf810ef5f4f4462f6082dc30d3a7b144dcce0d9

Merge "Add dex2oat permissions to open and read the tmp apk." am: 47061e59 am: 70269b78 am: 24409c36
am: 78a5ffd3  -s ours

Change-Id: I0e43fb52c0d608d0a95d0f0f76121d0792ea4990

hal_client_domain no longer allows read dir permission, in order
to load .so from /system/lib, we have to add this permission ourselves.

bug: 37476803
Change-Id: I1711d158c2f4580f50ac244da10c489df003cc18

am: 24409c36

Change-Id: I213a2aaca2c4fe4e7b1eac0971b99517dab2bb6f

am: 70269b78

Change-Id: I9fb2b4fc6b5664ac90e922a1253445cc51b16462

am: 47061e59

Change-Id: I924bfbc908321e321ca464adf8017bd3e212450f

am: a242ee6f

Change-Id: I966d9c6a9608116ab2b8f5ed68c8baa1b518439f

am: 6c80fcba

Change-Id: Id265afd1eab295e5a3bd33b05e820e6eaa8fc6ff

vndservicemanager is a copy of servicemanager, and so has the exact
same properties.  This should be reflected in the sharing of an object
manager in SELinux policy, rather than creating a second one, which is
effectively an attempt at namespacing based on object rather than type
labels.  hwservicemanager, however, provides different and additional
functionality that may be reflected in changed permissions, though they
currently map to the existing servicemanager permissions.  Keep the new
hwservice_manager object manager but remove the vndservice_manager one.

(preemptive cherry-pick of commit: 2f1c7ba7
to avoid merge conflict)

Bug: 34454312
Bug: 36052864
Test: policy builds and device boots.
Change-Id: I9e0c2757be4026101e32ba780f1fa67130cfa14e

Allow Bluetooth process to access /dev/uhid in SELinux Policy am: a61f7f60 am: ae709241 am: a8af61f0
am: 23ca0826

Change-Id: Ifd034a7c1ffe5371b30fa8af8f7f0776ecfdfef6

Bug: 37476041
Test: make, pair and connect to HID device
Change-Id: Ic7e81382994769e3f3a91255dcf3624edeaf6bfd
(cherry picked from commit a61f7f60)

am: a8af61f0

Change-Id: I9c49e79fd976c9c4bf37d79102d22d1e4c350a40

am: ae709241

Change-Id: Ia52cb0d049a82b2ce682243ff1fbe90ebd0a4614