am: 33c182a7

Change-Id: Ieb62d1540d0d95156a6914de4134533384267ff5

am: 6b51856d  -s ours

Change-Id: I7cbcddb9fee433655b34b0d85c4ab285b49fc873

am: e1801fa7

Change-Id: Ib4d19a23e1674361b07a03be65b5ba5bb94a51f0

am: cdc68c65

Change-Id: I7a2898cbbb77d8c2b88c50617e373423df13fe56

am: f60ccadf

Change-Id: I7dcf02944a4f575ccbc9756edf72414126f1583f

am: eb584363

Change-Id: I6b42246d7ab2a7864adcfb39324a04732c2be686

am: 9047a4de

Change-Id: I92c96aee077c2e3e6b84a6382d003fa7a1dc0b44

This allows for more native modes.

Bug: 73824924
Test: adb shell setprop persist.sys.sf.native_mode 2
Change-Id: Iffdeadc8dc260de4b0c7f2b46aab08d64d25e3b1

am: 5d8aba8b

Change-Id: I970508c74a120fc8a426c095ce5c6d611d48f5bd

am: 5e0690c9

Change-Id: Id5331219e88970aaf184698d5fbf85af0787feaa

This should help fix presubmit tests.

Bug: 77634061
Test: Built policy.
Change-Id: Ib9f15c93b71c2b67f25d4c9f949a5e2b3ce93b9c
(cherry picked from commit c6b5a96b)

am: 4af9448a

Change-Id: I1f178435ae86b871b29e9cfa3c3547b28c72b5be

am: c9523bd4

Change-Id: I3194c759039d08fe8b1f08f37ddcebab67626327

am: db465285

Change-Id: Icd5639ebae411b2c6e6acaf0db143794351dcb1c

This addresses the following denials:

avc: denied { fowner } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:r:vold_prepare_subdirs:s0 tclass=capability
avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:storaged_data_file:s0 tclass=file
avc: denied { relabelfrom } for comm="vold_prepare_su" name="storaged" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=dir
avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=file

Bug: 77875245
Test: Boot device.
Test: Mislabel directories used by vold_prepare_subdirs, reboot, and
ensure it can relabel them without denials.
Test: Add user, reboot, delete user, reboot, observe no denials.

(cherry picked from commit 855dd5a8)

Merged-In: Id67bc99f151a6ccb9619bbfb7080452956405121
Change-Id: Ic86be1e1afed37602255448e5700811d197403f9

Vendors may use this to write custom messages to their bootloader, and
as the bootloader is under vendor control, this makes sense to allow.

Bug: 77881566
Test: build
Change-Id: I78f80400e5f386cad1327a9209ee1afc8e334e56

[automerger skipped] Whitelist vendor-init-settable bluetooth_prop and wifi_prop am: a11b16c9  -s ours
am: f068c68d  -s ours

Change-Id: I831f2705c185e1842ccd9a7d9ee5d83311ea9696

am: a11b16c9  -s ours

Change-Id: Iae27852448e18a91049b26b12dd3e958faa23858

am: 29673431

Change-Id: I93e41faf4ea839c85493ce7be0dc1fda032269cb

am: 21026c55

Change-Id: If61c950aad21beb7887f4fc833c27906624abc1e

am: 224921d1

Change-Id: I9ea2472151f97653fabbecfad13c0299f30f671b

Values of the following properties are set by SoC vendors on some
devices including Pixels.
- persist.bluetooth.a2dp_offload.cap
- persist.bluetooth.a2dp_offload.enable
- persist.vendor.bluetooth.a2dp_offload.enable
- ro.bt.bdaddr_path
- wlan.driver.status

So they should be whitelisted for compatibility.

Bug: 77633703
Test: succeeded building and tested with Pixels
Change-Id: Ib2b81bcc1fd70ddd571dc7fb2b923b576d62b7d5
Merged-In: Ib2b81bcc1fd70ddd571dc7fb2b923b576d62b7d5
(cherry picked from commit 224921d1)

[automerger skipped] Merge "Allow vendor-init-readable for sys.boot_completed and dev.bootcomplete" am: 362f7d6b am: 4a1af197  -s ours
am: 4b488e59  -s ours

Change-Id: Ifa685f9158809c0c19a43aabc0a49677b5480073

Values of the following properties are set by SoC vendors on some
devices including Pixels.
- persist.bluetooth.a2dp_offload.cap
- persist.bluetooth.a2dp_offload.enable
- persist.vendor.bluetooth.a2dp_offload.enable
- ro.bt.bdaddr_path
- wlan.driver.status

So they should be whitelisted for compatibility.

Bug: 77633703
Test: succeeded building and tested with Pixels
Change-Id: Ib2b81bcc1fd70ddd571dc7fb2b923b576d62b7d5

[automerger skipped] Merge "Allow vendor-init-readable for sys.boot_completed and dev.bootcomplete" am: 362f7d6b
am: 4a1af197  -s ours

Change-Id: Icc06e8943cf2d75892caa28e50703cca056df968

am: 362f7d6b

Change-Id: I16cb153698c0c924bc0f2051acf9c06c1384e517

am: a27a1b33

Change-Id: I67254f5f5517d0a85d648f4817d7a7c0d63abc7b

am: cb336d89

Change-Id: Ic11ec1e173d97fc24730520e741806bf164564f7

Denials:
04-12 12:42:47.795   903   903 W traced_probes: type=1400 audit(0.0:5684): avc: denied { search } for name="1376" dev="proc" ino=204553 scontext=u:r:traced_probes:s0 tcontext=u:r:untrusted_app_27:s0:c512,c768 tclass=dir permissive=0
04-12 12:42:47.795   903   903 W traced_probes: type=1400 audit(0.0:5685): avc: denied { search } for name="1402" dev="proc" ino=204554 scontext=u:r:traced_probes:s0 tcontext=u:r:platform_app:s0:c512,c768 tclass=dir permissive=0
04-12 12:42:47.801   903   903 W traced_probes: type=1400 audit(0.0:5686): avc: denied { search } for name="1496" dev="proc" ino=204557 scontext=u:r:traced_probes:s0 tcontext=u:r:untrusted_app:s0:c85,c256,c512,c768 tclass=dir permissive=0
04-12 12:42:47.805   903   903 W traced_probes: type=1400 audit(0.0:5687): avc: denied { search } for name="1758" dev="proc" ino=204563 scontext=u:r:traced_probes:s0 tcontext=u:r:priv_app:s0:c512,c768 tclass=dir permissive=0

Bug: 77955286

Change-Id: If0985d3ddd7d14c2b139be1c842c9c8df99b90db

am: 5f010c54  -s ours

Change-Id: I9fd8075164dd3ec33e07c27941f4fe64ee22437d

am: a3d199dd  -s ours

Change-Id: I09cf25b52e7c15b57e8a103d43b468dcef466154

am: 45c72ddf

Change-Id: Iad601fb52e9e145b1a2729a37867de40556d9d3a