Change-Id: I295489a1a013d181f75602c7c4ac2f4c9f555e4a

Change-Id: I7f77ef85f5dd3fd9639bfd2cf16328486b82b392

* Needed on 4.14+ devices.

Change-Id: I424a7cf76a74e25faf523dd84c687549b3c50b17

Change-Id: I067ead0c2f60493a974bc220b67d7039acea4823

Change-Id: I8761fd7737126dab7cf0748d3f9f46fcd83c660f

Change-Id: I02caf9ef3e8786b27ae4517533c3df44437b0015

* msm-4.14 moved rpm stats there.

Change-Id: I75ed39bf8fba8a2775d0a702f749f2b164839628

* These are neverallows
* We are running sysinit as permissive anyway

-> Get rid of them from everyone's logs

Change-Id: I29a8eeeb81f068a9766b550d4967d7998205535e

 * LiveDisplay has different backends (QDCM, sysfs, etc.). QDCM impl
   doesn't use sysfs, sysfs impl doesn't use QC display service and
   vice versa, so don't abuse the "default" policy.

Change-Id: I87725a091ebe5db5beeb1619ce4daaac9636d808

 * Remove platform specific rule from sepolicy.mk as well, it's never
   ever a valid usecase.

Change-Id: I8bf6af30407d55beb9b2c5a2afaca091564e1605

Change-Id: Ibad7c3a88e876006ac88933b894050b045c847b0

Change-Id: I7beb51197b6049133b4385ef344e21fbf2de1ea0

Change-Id: I7d7b932688d95fc397576e74bc1ff434395ec663

 * Introduce a new board flag TARGET_USES_PREBUILT_VENDOR_SEPOLICY and
   a sepolicy variant: dynamic
 * When TARGET_USES_PREBUILT_VENDOR_SEPOLICY=true, dynamic act as
   private policy, and vendor policy is excluded in order to avoid
   conflicts (it's not integrated to final builds anyway). When the flag
   is not set, dynamic acts as vendor policy to survive from system
   image change i.e. GSI installation.

Change-Id: I8bfd078d6064616c88e2c58a9fa3aa045dddf303

This will become unused after we start reading the vendor.bluetooth.soc prop, so we drop it.

This reverts commit 4edd29ff2a2cd19326fc557403f6ba0e6847744f.

Change-Id: I4aacf1b91148ae49561e0ee47c11bcdafe6dc202
Signed-off-by: Atman <masteratman@gmail.com>

On devices with property isolation, appdomain cannot access
vendor_default_prop. This causes the FM JNI to crash, so to avoid this,
label it as exported3_default_prop, which is accessible by the appdomain.

Change-Id: I3f347d2ed2d51e8de5142283ec992744efec7c22

* This makes apps like AccuBattery work again

Change-Id: Idc6c2d5a938a9dd22343f6ee167c0f18a79a2329

Change-Id: Ie33b247180116e8bc40c29884bc6734d8b1a54b2

 * We use this to detect fbe encryption

Change-Id: I29355790068b78437aba11390bdf3efd22e229bc

Change-Id: Ide51c085b1e697044e1fbb00eab6fa7d78cb9ff0

Change-Id: I5eaf677d693226c8e060f0ebbebb4e1e4c5eb515

* For adb

Change-Id: Id8aafe062cc8e2b34e3aeacc201dcab0a0a9571c

Change-Id: I7f9e4d07fc28f48817618a784317fe239a39a41a

Change-Id: I73b60f4d6d38e6b8f0749a43c75744d471c7ce32

 * denied  { link } for  pid=573 comm="recovery"
    name="vold_blkid.tab" dev="tmpfs" ino=20425
    scontext=u:r:recovery:s0 tcontext=u:object_r:tmpfs:s0
    tclass=file

Change-Id: I0b3e47dd00c5a32261691f51838a8d9af9778faa

* For volume manager

Change-Id: I7bab9804c8e05f9ec14cc3179cb72afb4ecf514b

Fixes:
 avc:  denied  { read } for  pid=573 comm="recovery"
 scontext=u:r:recovery:s0 tcontext=u:r:recovery:s0
 tclass=netlink_kobject_uevent_socket permissive=1

which in turn fixes reboot

Change-Id: Ie28453602be3b5c3c4064057f5f071ee7508d316

Change-Id: Ia358def04eb2491c25dadc7ff93afbb06405eea0

Change-Id: Ia8b519afd71601dfab2b17ab5b4ebfda1dd1f7e0