am: c8e489be

Change-Id: Ia1bffa0026fc1e5fa4c4f2eee743dfa2545a83c0

am: 7913fb01

Change-Id: I06d55496bd49dbbe3f948215026c2323d874cfc7

am: 1b2ea497

Change-Id: I6410593a4f7616958ca8b6cc1ca37401bfc693a6

Do not attempt to build odm_sepolicy.cil if BOARD_ODM_SEPOLICY_DIRS is
not defined. Attempting to do so will create an empty file, which causes
build problems when
https://github.com/SELinuxProject/selinux/pull/100/commits/0c6ea1e812fbe75aef03ced077d4f4cd26d982fc
is applied.

Test: "cd system/sepolicy && mma -j55" succeeds
Test: "make checkbuild" succeeds
Change-Id: Iefc458bddff3d08e5fcb86f8be3cad16d7e36e73

am: 05eaccc4

Change-Id: I6fb5f5671477dd6d72bb67e53e40635786856a21

am: e4b212ad

Change-Id: Iba14e9eb1d216d9ffb474d8c593682dc0811777e

am: 6cd9bd07

Change-Id: Ifb50348dfec882414d228ef83630c7b4379426e8

Fixes:
avc: denied { read } for comm="init" name="linker_asan64" dev="sda22" ino=1833
scontext=u:r:init:s0 tcontext=u:object_r:system_linker_exec:s0 tclass=lnk_file
permissive=0

Bug: 116486312
Test: adb unroot && adb shell ls -l /system/bin/linker_asan
Change-Id: I754daaf3576e83d516cc9189b8be04dcc41bbc5c

am: d46159e3

Change-Id: Iccfa94cfc550c63b26fb5bf0720fde5cea822f9c

am: cf728896

Change-Id: If0aec726ee0497ac2bbd41fdde57bb509cab2de4

am: 26fa914c

Change-Id: I52b6787ca2ad04f003ec446ce8ac96e375f67c7b

Create a new service type buffer_hub_binder_service for
BufferHubBinderService and allow bufferhubd to publish the service.

Add the service to 26.0, 27.0 and 28.0 compat ignore files since the
service is not available in past versions.

Fixes: 116022258
Test: build passed

Change-Id: I5a21f00329ed474433d96c8d1ce32377f20cada3

am: 699df856

Change-Id: Ief611ae21a42926415b632b4d6c7da18fd6753d3

am: 3faa2077

Change-Id: I50c124206a6604e84567641c35e1e5d8ea3c7e3a

am: 06ddf4b4

Change-Id: Iedb3581e79540611798a4738bca937af4cbfd5c9

am: 903377ef

Change-Id: I5ec26b7f0a7e781ad3e806b63c4a0ec963e21b2f

am: 90e1c5bf

Change-Id: Ia86cfc207ca4617e334f87ee088582f86db4e2b8

am: 0b67bb88

Change-Id: I84c231dee85060dee61c4c9b7f2187ef35b6ba6a

Allow vold to run exFAT filesystem check.

Test: build, mount exFAT volume
Bug: 80202067
Change-Id: I68f3438de89246e806cebe483f37e31c68aaa3d7

Assert that only apps and installd may open private app files.

Remove "open" permission for mediaserver/vold and remove their
neverallow exemption.

Test: verify no related audit messages in the logs.
Test: build
Fixes: 80300620
Fixes: 80418809
Bug: 80190017
Change-Id: If0c1862a273af1fedd8898f334c9b0aa6b9be728

[automerger skipped] Merge "Rename biometric_prompt_service to biometric_service" am: 7087bf12 am: e230d6dd
am: b115ff5f  -s ours

Change-Id: Ib008c8baffda10d37bd3290c79f93871f5983d47

am: e230d6dd

Change-Id: I8ebfcc623d2a9221f67626da87e8613afb639c58

am: 7087bf12

Change-Id: Ideab840443e5086464cb7d93325eaee4af111236

am: 2ce65bef

Change-Id: Ia6bda63626f088f7c6211706f6b6a42f9e8c1a42

am: 70f1c88f

Change-Id: Id08086a1c2fbeb71a4c0d5329d58ab226c82d9ce

am: 68160442

Change-Id: I74d379a088d49e2bb24cd04732dfba8921d3230f

am: af090fd2

Change-Id: Ia004457a6e031fb54ceed789e6c1d2615a3118d2

am: 618bdfca

Change-Id: I3606690de94cb77e38538c709b656341af6d2d87

am: 259087e5

Change-Id: I48cdb277239691843df29ee90bffcda6e65d590e

am: 0d690d34

Change-Id: I71ed2f15999870769ad27d90aa6eaef70dde4d4f

am: 4502d72c

Change-Id: I200cf4c1f7cd41ab678d88677c6e88a500b3a7ce

am: 535b3195

Change-Id: If68ae80f9a1b44f9749a6ae3f2e6199a89ca979a

am: 7776cc3b

Change-Id: Id7d22621ff78a66836343763158582c0da87166f

am: c5226a8e

Change-Id: I9e330cd1421a2344e7ccdff5c1a5d914754d0237

am: 25faf79f  -s ours

Change-Id: If8716684114fb6ff1a58bec778a5c6d9d43728ac