am: 204da471

Change-Id: I266b02ec2b01b3a8717a724b2ca9b6b5dad258d9

Change-Id: Iafa4abcff36fe75e031fc6b6c2108a7617d34b97

am: f5defc90

Change-Id: I8a59ecbf59f8e6618bd5a06e61a46594638d6bcd

am: 9f152d98

Change-Id: I1c319ac3558e5ff96072638dc4be97502da61056

MediaProvider requires permissions that diverge from those
of a typical priv_app. This create a new domain and removes
Mtp related permissions from priv_app.

Bug: 33574909
Test: Connect with MTP, download apps and files, select ringtones
Test: DownloadProvider instrument tests, CtsProviderTestCases

Change-Id: I950dc11f21048c34af639cb3ab81873d2a6730a9

MediaProvider requires permissions that diverge from those
of a typical priv_app. This create a new domain and removes
Mtp related permissions from priv_app.

Bug: 33574909
Test: Connect with MTP, download apps and files, select ringtones
Test: DownloadProvider instrument tests, CtsProviderTestCases

Change-Id: I950dc11f21048c34af639cb3ab81873d2a6730a9

am: 94eaf989

Change-Id: Idb0275994d21bda3b79f83588adf67004486c410

am: 0d1b2ce1

Change-Id: I2f2bb8fb9974dca42398f7c7cc5e7ace76824d47

am: 2f92a742

Change-Id: I9d1d538260e224c1c159e3f12585397a4bc9833c

am: 04a9c429

Change-Id: I9c44efe98a994ac302436325809657762ca6d26a

Bug: 36604251
Test: Netflix protected content, Play movies
Change-Id: I5c2c542007abddbe56b933ff44d65bd376b6691e

am: b76c352e

Change-Id: Ifc70c644ac582f2b3fb65a8f44a893e6626ee01f

am: 7eac10c7

Change-Id: Idfebcf45797a9feed9fb529a104d0b7e40e5ec28

am: f69d535c

Change-Id: I19a518a9f84d17fdd7d3f7b8613d85785948187f

am: 80cab7de

Change-Id: Iba1cf44b3e7c965b8ea7033b80a25393730512e9

The new binder_call() lines had to be added
because this change removes mediacodec from
binderservicedomain (on full-treble), hence
domains that could previously reach mediacodec
with binder_call(domain, binderservicedomain)
now need explicit calls instead.

Test: Youtube, Netflix, Maps, Chrome, Music
Change-Id: I3325ce20d9304bc07659fd435554cbcbacbc9829

Bug: 36463595
Test: make -j48 sepolicy
Change-Id: Id8e66e3e08ceb1301c36824af93410aa84def8d3
Signed-off-by: Sandeep Patil <sspatil@google.com>

am: 6cc5334a

Change-Id: Ic465169a0ac0c04a2114a4268caae3b82a7b6706

am: e506cda3

Change-Id: I9df35ecb00db0ed5d3a1430e64056e09579ab0a5

am: 6a4b6c68

Change-Id: Ie9c93a313215652d22fa2bc93aeb2a468916e008

am: acb66317

Change-Id: Ib10b8c031066507b72361e302204646d3c9f9814

Test: WIP
Change-Id: I678b0d0e9750b25628b86060574fd516d3749cdf

am: 405e7283

Change-Id: I6045f5edf0ef32d3001eb76a8437a2b92790cca3

am: 748cae86

Change-Id: Ia9c8f25a66ba8cf8528e80b3ce4c151f10574a6d

Temporary attribute (checked against in CTS) to point out vendor
processes that run /system executables. These are currently only down to
2-3 of them that are related to telephony on sailfish

Bug: 36463595
Test: Build succeeds for sailfish
Test: ./cts-tradefed run cts -m CtsSecurityHostTestCases -t \
          android.security.cts.SELinuxHostTest#testNoExemptionsForVendorExecutingCore \
          --skip-device-info --skip-preconditions --skip-connectivity-check \
          --abi arm64-v8a

Change-Id: I9eb40ad259aefba73869d6a1b40186d33fa475dd
Signed-off-by: Sandeep Patil <sspatil@google.com>

Bug: 36463595
Test: Boot sailfish, make wifi call, internet over data and wifi

Change-Id: I81259b6412d7197725afe2fe4976aa0a03b8df6e
Signed-off-by: Sandeep Patil <sspatil@google.com>

Attributes added to the policy by the policy compiler are causing
performance issues. Telling the compiler to expand these
auto-generated attributes to their underlying types prevents
preemtion during policy lookup.

Bug: 3650825
Test: Build and boot Bullhead
Change-Id: I9a33f5efb1e7c25d83dda1ea5dfe663b22846a2f

am: d6ceae5a

Change-Id: I03753dbba73acf23e557e8abdebbd45df310a9fe

am: de2e79c5

Change-Id: Icc632129142cba968ca05206690adfef445f62c7

Merge "Allow recovery to read thermal info on sailfish" am: 5ab5cfba am: afa8120a am: 16118451
am: d5c8c6b6

Change-Id: I5b20d4028cc1a1f9d1b3d7b9bf84109198e64781

am: 16118451

Change-Id: I55938593a2dd5f284dd2332a3685a737acbe1aec

am: afa8120a

Change-Id: Ie7c760c3952650b5b7b60f956a0a5934a64e399f

am: 5ab5cfba

Change-Id: I1fd254e6991d4d7f9afa6e36b26cc879c73fa6da