Commit: 9287e0dd272b85b475e33bcbd7d868517a0f98f9 removed the registration
of EntropyMixer with servicemanager, so it no longer needs a context.

Bug: 18106000
Change-Id: I9aeb35e7ffde75090f4234ea193514fb883b1425

* commit '460c3f16':
  Accept command-line input for neverallow-check.

Change-Id: I5630bddc1dd2f5ce9d9f6091903c0cf6cafc38ca

* commit '94ddd0b2':
  allow system_server to set ro.build.fingerprint

* commit 'db4582a9':
  allow system_server to set ro.build.fingerprint

* commit 'f639e96b':
  Undo idiotic build fix.

Just remove unused variables instead of making them refer to
the wrong statics.

Change-Id: I314bfe91b7912f7d8c9cba7dd55a76d72c879a51

* commit '012dd734':
  Fix build.

Introduced by the merge conflict resolution for
3a1eb33b.

Change-Id: Iddbc9e4d83c513d7003102f881793b5b7945566c

Also, divide each sepolicy-analyze function into its own component for simplified
command-line parsing and potentially eventual modularization.
Bug: 18005561

Cherry-pick from: https://android-review.googlesource.com/#/c/111626/

Change-Id: I751a99feffe820308ec58514fdba4cdef184d964

* commit 'fe0d6cb8':
  Add neverallow checking to sepolicy-analyze.

Change-Id: I5cdc157157b6ed382e4827406bce7406fc2c3e3a

Some devices leave "ro.build.fingerprint" undefined at build time,
since they need to build it from the components at runtime.
See https://android.googlesource.com/platform/frameworks/base/+/5568772e8161205b86905d815783505fd3d461d8
for details.

Allow system_server to set ro.build.fingerprint

Addresses the following denial/error:

  avc:  denied  { set } for property=build.fingerprint scontext=u:r:system_server:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service
  init: sys_prop: permission denied uid:1000  name:ro.build.fingerprint

Bug: 18188956

(cherry picked from commit c48971f6)

Change-Id: I24bc1b3405f60c9d4e16e5a995e987e54692b6aa

* commit '6eabeb20':
  allow system_server to set ro.build.fingerprint

* commit 'c230c292':
  allow system_server to set ro.build.fingerprint

* commit 'c48971f6':
  allow system_server to set ro.build.fingerprint

Some devices leave "ro.build.fingerprint" undefined at build time,
since they need to build it from the components at runtime.
See https://android.googlesource.com/platform/frameworks/base/+/5568772e8161205b86905d815783505fd3d461d8
for details.

Allow system_server to set ro.build.fingerprint

Addresses the following denial/error:

  avc:  denied  { set } for property=build.fingerprint scontext=u:r:system_server:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service
  init: sys_prop: permission denied uid:1000  name:ro.build.fingerprint

Bug: 18188956
Change-Id: I98b25773904a7be3e3d2926daa82c1d08f9bcc29

* commit '23d0fbae':
  Remove network shell script

* commit 'a6b7b76d':
  Remove network shell script

* commit 'f330f375':
  Remove network shell script

See NEVERALLOW CHECKING in tools/README for documentation.

Depends on change I45b3502ff96b1d093574e1fecff93a582f8d00bd
for libsepol to support reporting all neverallow failures.

Change-Id: I47c16ccb910ac730c092cb3ab977c59cb8197ce0
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

This seems to not really being used, especially considering
that the init.rc does not have a oneshot service for it, and its
not using the build_policy() and other things to even make it
configurable.

Change-Id: I964f94b30103917ed39cf5d003564de456b169a5

* commit '6452ae75':
  App: add permissions to read symlinks from dalvik cache.

* commit 'afd27603':
  App: add permissions to read symlinks from dalvik cache.

* commit 'e9552fe1':
  App: add permissions to read symlinks from dalvik cache.

* commit 'aed33118':
  App: add permissions to read symlinks from dalvik cache.

* commit '9ab0194a':
  App: add permissions to read symlinks from dalvik cache.

Bug: 18035729

(cherry picked from commit 6f201ddc)

Change-Id: I9865932ca87acefe0ab7feb3e6dc875f3d64276d

* commit '6f201ddc':
  App: add permissions to read symlinks from dalvik cache.

Bug: 18035729
Change-Id: Ib60f9cd59a7a185ae99761ad29358a735ae2ad26

am 0d8c55a9: am 4bd6cf5f: am 9f0af9ec: Merge "zygote/dex2oat: Grant additional symlink permissions" into lmp-sprout-dev

* commit '0d8c55a9':
  zygote/dex2oat: Grant additional symlink permissions

* commit 'b721ab3a':
  allow run-as to access /data/local/tmp

am 4bd6cf5f: am 9f0af9ec: Merge "zygote/dex2oat: Grant additional symlink permissions" into lmp-sprout-dev

* commit '4bd6cf5f':
  zygote/dex2oat: Grant additional symlink permissions

* commit '5aaa8e86':
  allow run-as to access /data/local/tmp

* commit '9f0af9ec':
  zygote/dex2oat: Grant additional symlink permissions

* commit 'b7934922':
  allow run-as to access /data/local/tmp

* commit 'c670d1c4':
  allow run-as to access /data/local/tmp

* commit '8ad45705':
  Allow init to chown/chmod character devices.