Bug: 110887137
Test: Flash new system policy onto a device with vendor policy that uses
untrusted_app_visible_* attributes, and check that old and new attributes
are applied to exactly same types.
Change-Id: Ibee0ec645878fcc8c93cd0fbd169a8d45129d79e

am: 31d43787

Change-Id: Idb22ea343982ea6f150926cc0c6fdae41a923a32

am: e1adac6e

Change-Id: I7c2bffcdb7ce588bf8adb98fc11bd493b1c38c31

am: 315f2fb2

Change-Id: I103bfc51a52799a3a4c46e493ae88ce9e985984a

am: 84a42ead

Change-Id: Ib4e55bd3a56639c993314d3732b5dc406fbed0bd

The Android security model guarantees the confidentiality and integrity
of application data and execution state. Ptrace bypasses those
confidentiality guarantees. Disallow ptrace access from system components
to apps. Crash_dump is excluded, as it needs ptrace access to
produce stack traces.

Bug: 111317528
Test: code compiles
Change-Id: I883df49d3e9bca62952c3b33d1c691786dd7df4d

am: 18c78fcd

Change-Id: I1e49964b4e603dd96c3b926301716850f684bea1

am: f4b21858

Change-Id: I944c256f0f16d903ec562751bd75030bf9020a91

am: b1f43028

Change-Id: I0eed02c175987890cc7bb01360b3c321275bdb20

am: 719fa6db

Change-Id: Iecca10575cadd8cd8e155f18eadbca4f93f37a2e

Test: none
Change-Id: I5023f3f3f9362d456f30c81ec67580509101e81e

am: dfb635ea

Change-Id: I41eec9331b23ad190af823a99db3a7161181966a

am: 717d04b4

Change-Id: Ie2a4c26e6f0c35db3bf965b4eb1e354d58eeb6ad

am: 59b5de0b

Change-Id: I987d304aa6df76dd312e3bc91b5d801818990cf1

am: 16544eb9

Change-Id: I0790ed88b45665c9087562144a73cd0294cb4c31

Fixes -Wzero-as-null-pointer-constant warning.

Test: m
Bug: 68236239
Change-Id: Ib3f0a25a5129c34d94ebebff818feb5e6fd349dd

am: ab352c5e

Change-Id: I9cdd1706f8a4b5befc2c57e533134f65be99b3d9

am: cda347e8

Change-Id: Ic920c0aeec808d0818397fc4911d2ab4d1a90791

am: c1ebd935

Change-Id: Icd63d3c247a49ece8c514c3c1845b892f364e60f

am: 32809859

Change-Id: I17244cba89aa30d1fa560648f618e21d320ed87c

am: a889cbb6

Change-Id: Ibb0115e76e3d0cb518de518df71c45d1564c1e77

Bug: 80414790
Test: boots
Change-Id: I15233721fa138e0fdf1a30f66d52b64cbab18b81

am: 57e1dba0

Change-Id: I7f5e8cbe43668c8b1972f572e6491c08f0546c89

Bug: 111615259
Change-Id: If6887f7ee3af14ebb25440db9b654e9ff374bb23

am: 01486a9f

Change-Id: Ie4e17fbf1baa2ccadf2ba5c3f33661b7cac3cb8f

am: dc51b2bf

Change-Id: I100e36d3dfddac84d3234615866559134b20e7e7

am: f832f214

Change-Id: Ic3f1a7f904f69b954a0f63187e02dfa433fe5e9e

am: 0cc68ea0

Change-Id: Ie3d39420403eaba08ccfd2c3f3fb42a9594f07e6

Bug: 72458734
Test: Compile current system sepolicy with P vendor sepolicy
Test: Plug in a P device then do:
m selinux_policy
cp $OUT/system/etc/selinux/plat_sepolicy.cil  plat_sepolicy.cil
cp $ANDROID_BUILD_TOP/system/sepolicy/private/compat/28.0/28.0.cil 28.0.cil
adb pull /vendor/etc/selinux/plat_pub_versioned.cil
adb pull /vendor/etc/selinux/vendor_sepolicy.cil
secilc plat_sepolicy.cil -m -M true -G -N -c 30 28.0.cil \
plat_pub_versioned.cil vendor_sepolicy.cil
Change-Id: I399b3a204eb94bee0ba1b5024b1c3463219c678e

am: ac0bfccb

Change-Id: I597abee427fc13dd605e1bf1b28bb2a5233cd630

am: 14c5117b

Change-Id: Ifd915ad3b6864e037b5ab559d9bf3f0e71fa0fb0

am: 95b223b4

Change-Id: I475cb1de1a9d953a23121b0366f734f1839fbab0

am: 7b377b1f

Change-Id: I695ea7d06cd3edddf1c692db5f4a04e3b6a614bb

am: 9563a64d

Change-Id: Ied75b1303d2ad7061fb74f5185946cdbe7a2386e

am: a55f637a

Change-Id: I7a7d2f284caaf264c6c74e9d8c8046ce9559789d

am: 708aa90d

Change-Id: I4a0fdea7adead3baceb089644ed37a0c479d2e62

This is to avoid merge problems if we make any further changes in AOSP.

Test: Builds.
Change-Id: Ib4193d31c02dda300513f82f6c7426a2e81d8111

This is so we can get data on which apps are actually doing this.

Bug: 111544476
Test: Device boots. No audits seen on test device.
Change-Id: I5f72200ed8606775904d353c4d3d790373fe7dea