Kill floating activities running in the same thread when tapping outside

This change makes all activities from the same app to be finished when we tap outside the halo window. Other apps running in different threads
(floating or not) won't be finished.

Change-Id: I2acac9655e76f3a8b627954871c62f0630fba8ef
Completely hide Halo))) icons while tasking

- previous commit by BigBrother1984 stopped the highlighting of Halo))) icons
  this should remove them completely. Other status bar icons are still highlighted

Change-Id: I86501aaefb855a2d73230f4b59bfdca707f5f179
Add seinfo parsing to PackageManagerService.

This patch set allows the PMS to parse the
mac_permissions.xml file which contains the
seinfo values. Each package that is installed
on the device will be assigned an seinfo value
based on policy. This seinfo value will help label
the app process and data directory. Modifications
also include, adjustments to ApplicationInfo.java
to store the seinfo tag per package, adjustments
to installd to communicate the seinfo tag to
libselinux, and finally a set of unit tests.

Change-Id: I34682e4cdf62c3efd3baeb50cbc60f20d9381ab0
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Added SELinux enforcing status and booleans keys to secure system settings.

Conflicts:
	core/java/android/provider/Settings.java

Change-Id: I19737f10adb297edc6dce1b4cc1c42b0a66e5531
Save off the seinfo value with packages.list.

Patch adds the seinfo label per package to the file.

Change-Id: I8d3cf6cc8de8e14dfd09e84f33ae68984a0a0336
Add APIs to allow Device Admins to change SELinux settings

These calls, added to the Device Admin API, will allow Device Admin apps
to change various SELinux settings, including:
* Toggling SELinux enforcing and permissive modes
* Toggle SELinux booleans
* Load a new SELinux policy file (sepolicy)
* Load new SELinux context files ({property,file,seapp}_contexts)

In order to use these APIs, a Device Admin must first request
USES_POLICY_ENFORCE_SELINUX, then become a SELinux Admin by calling
setSELinuxAdmin(). All other set* calls relevant to SELinux are guarded
by a check against whether the admin is a SELinux Admin.

Otherwise, the style of the set* calls are very similar to the other
calls setting device policy in the Device Admin API. That is, these
calls change the Admin's internal state and then call a sync method to
update the device's state to the Admin's state.

Change-Id: Ibc41464210a85493e9acf48763215f1714a58c34
Remove SELinux additions from public API

Change-Id: I40216905c86cc67c7f06d10bbc41ccb8973b9ec1
Simplify check during admin removal for whether to cleanup SELinux

Also re-arrange and cleanup

Change-Id: I3fd84b864b75875e6a78874a0fd0756bae78806d
Apply MMAC changes from master.

Change-Id: Ief7a0aeb4433f5b642137c6aed24aeeb29d8e300
Deleted files uf: "Apply MMAC changes from master."

Change-Id: I6f62b14afb9fa06872d37794e5df09f427bf4c50
Implement Device Admin API for MMAC

Conflicts:
	api/current.txt
	core/java/android/app/admin/DevicePolicyManager.java

Change-Id: I7ab12730be1d2a093127c728546b3bad8ee593e5
Proper security labeling of multi-user data directories.

This patch covers 2 cases. When an app is installed
and the resulting data directory is created for all
existing users. And when a new user is created and
all existing app data directories are created for
the new user.

Change-Id: I62ea34077b314ed76dd327bcf52bd7056d446eba
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Update location of policy files

The location of policy files has changed from
/data/system to /data/security.

Also, a name change to mmac enforcing property
name to place it under persist.mmac. namesepace.

Adds api's for getting and setting the MMAC
enforcing mode.

Change-Id: Id07f3932e9595432a7f3f58c9a41e7588bad47de
Merge pull request #1 from cristianomatos/cr-main

Test mer