Move hostapd to vendor/bin/ because it's only used by WIFI HAL.
This commit is for sepolicy corresponding changes.

Bug: 34236942
Bug: 34237659
Test: Hotspot works fine. Integration test.

Change-Id: I2ee165970a20f4015d5d62fc590d448e9acb92c1

am: d047ae0b

Change-Id: I28e7b8313ebc41939d5bbd9808c2fce20c7c2343

am: 8c9c49da

Change-Id: Ia4e4c83d31cd05c484ce8bcfd3390856ee8dab4f

am: 193dccda

Change-Id: I43d2bfedd286ac6e0847c9881de4b43b513de9cc

am: 8b2a7e78

Change-Id: I4689933b6cb1f829bc6fd563ec6e7d2afb0b4008

am: 07be1dfa

Change-Id: I70a484595abd3cbd2b69be3a166bca90be4e7725

am: 87ae5f7d

Change-Id: I75e77002962413f668d940469916b5bb8654116d

This adds build targets for outputing precompiled kernel policy usable
on devices with policy split between system and vendor partitions. On
such devices, precompiled policy must reside on the vendor partition.

Because such devices support updating these partitions independently
of each other, the precompiled policy must reference the system
partition's policy against which it was compiled. This enables init to
establish whether the precompiled policy is valid for the current
combination of system and vendor partitions.

The referencing is performed by both the system and vendor partitions
including the SHA-256 digest of the system partition's policy
(plat_sepolicy.cil). Only the when the digest is the same on both
partitions can the precompiled policy be used.

Test: plat_sepolicy.cil.sha256 contains exactly the hex form of the
      SHA-256 digest of plat_sepolicy.cil
Test: plat_sepolicy.cil.sha256 is identical
      precompiled_sepolicy.plat.sha256.
Bug: 31363362
Change-Id: I9771e1aa751e25bba6e2face37d68e0ae43b33a3

With the plat/nonplat policy split, nonplat_seapp_contexts should still
be checked against the plat_seapp_contexts_neverallows during build
time to ensure no violations occur.

Test: stock aosp_marlin builds.
Test: name=foo.bar seinfo=default fails (as expected) in nonplat policy
Test: name=foo.bar seinfo="" fails (as expected) in nonplat policy
Bug: 36002816
Change-Id: I95b2c695b23e2bdf420575d631e85391e93fc869

Make /proc/sys/kernel/perf_event_max_sample_rate accessible to untrusted_app. am: 5b15baeb am: 4fa88f87
am: 161fef0f

Change-Id: Ieb378c06a91d11832fc712c2bd92e090493a8193

am: 5fae2a0f

Change-Id: Ib59253654baa553a048074e65e48121d673824e5

am: 4fa88f87

Change-Id: I08396949be44b71d00734a1a13c52a86c85255fb

am: 5b15baeb

Change-Id: Ic6ce0d595986c64590f85e8f39454585f42c1504

am: 3227d2ce

Change-Id: I8b175267f243614502b32fac338543fad736848b

am: 2b291121

Change-Id: I4da5fd5c5185eab1a80b427dc49bd49472831882

perf_event_max_sample_rate is needed to be read for native profiling,
otherwise CTS test can fail on devices with kernel >= 4.4. Before this CL,
the file is not readable from untrusted_app domain. This CL makes it readable
from both shell domain and untrusted_app domain.

Bug: http://b/35554543
Test: build and test on marlin.
Change-Id: Id118e06e3c800b70a749ab112e07a4ec24bb5975

We simplified the way we track whether or not a dex file is used by
other apps. DexManager in the framework keeps track of the data and we
no longer need file markers on disk.

Test: device boots, foreign dex markers are not created anymore

Bug: 32871170
Change-Id: I464ed6b09439cf0342020ee07596f9aa8ae53b62

am: 26e8acf0

Change-Id: I41f2946abcbd4a5207f950f914187e89fcef17e2

am: 04a48177

Change-Id: I52d15ac89b118d88dfac58596d2b83ca895ef56c

am: 87039898

Change-Id: If796c95bc4a0537821e7641c72bf50f333340772

Note: The existing rules allowing socket communication will be removed
once we  migrate over to HIDL completely.

(cherry-pick of 2a9595ed) 
Bug: 34603782
Test: Able to connect to wifi networks.
Test: Will be sending for full wifi integration tests
(go/wifi-test-request)
Change-Id: I9ee238fd0017ec330f6eb67ef9049211f7bd4615

am: d75028ce

Change-Id: I6ec22f61ccdf894289b678768256f9125b59a9a4

am: c0dfc6a7

Change-Id: Idb1128872ee48528a4769f4875b7d4e4745d6894

am: 4dfcffe4

Change-Id: Ia808eb0b0e1bb77d7b455f1a35b0fe1816590eb8

am: 9bf4029b

Change-Id: I960943926bde4ea2a6c96367e9fe9fe489b341ca

am: af5c27ad

Change-Id: Ib509846ef003b0f161e1d472278c6d858eb08112

am: 8276dfb4

Change-Id: I346b244164c58e59c5a8ef84425439fa3a627095

Bug: 35979722
Test: angler boot with UART on and set sys.wifitracing.started to 0 after boot
Test: no more avc errors on debugfs
Change-Id: I91d98428aaec915b3206535559a0c096e6de1603

We need more time to investigate the effect that this change will
have on DRM solutions. Until the investigation is done, revert.

This reverts commit 38d3eca0.

Bug: 30146890
Bug: 20013628
Bug: 35323421
Change-Id: I5ad69ef5ee12081ce7fc0a8440712f7f8f77cf16
Test: policy compiles.

am: 163c535c

Change-Id: If788a474606b6bd8cc6b130b1e1dcb9a49435e15

am: 3e9d190c

Change-Id: I765031d39324614b939f4f348e72b82f5d4fbeb3

am: 4aad8b42

Change-Id: I1b39b8e91faffad244eb8618844986ba9bfeb0c3

am: 1bedf208

Change-Id: I9eb642b867ecbf4108b0f0103ba4d7b6d575ecde

am: 37c58663

Change-Id: Ib730286221dc797159c30e0222558ca4b69aa6ec

am: 38d3eca0

Change-Id: Ie6ab2417788e627ae15e7faf76f9f9ef852c0c72

Add FD accessing rules related to media,gralloc and ashmem.
Also move a few rules to where they belong.

Change-Id: I0bff6f86665a8a049bd767486275740fa369da3d