d2_defconfig: use ext4 for ext2 and ext3

Change-Id: I6cabf7f157edcb25afd14a65ba4d061f2b166208
ApexQ: Disable binary syscall interface

Doesn't compile and according to cyanogen outdated and useless

Change-Id: If4d265829adf6f8db0a221600984e3306bb28c08
Merge "d2_defconfig: use ext4 for ext2 and ext3" into cm-10.2
Apexq: fix inheritance from selinux defconfig

Change-Id: I88d82196fc5c0c2780ab3e16ab1da7a3d24db97a
underp bluetooth

Change-Id: I64699523cede63518b33248e2e5ac7f36df0c793
Merge "underp bluetooth" into cm-10.2
Add security hooks to binder and implement the hooks for SELinux.

Add security hooks to the binder and implement the hooks for SELinux.
The security hooks enable security modules such as SELinux to implement
controls over binder IPC.  The security hooks include support for
controlling what process can become the binder context manager
(binder_set_context_mgr), controlling the ability of a process
to invoke a binder transaction/IPC to another process (binder_transaction),
controlling the ability a process to transfer a binder reference to
another process (binder_transfer_binder), and controlling the ability
of a process to transfer an open file to another process (binder_transfer_file).

This support is used by SE Android, http://selinuxproject.org/page/SEAndroid.

Change-Id: I9a64a87825df2e60b9c51400377af4a9cd1c4049
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Enable setting security contexts on rootfs inodes.

rootfs (ramfs) can support setting of security contexts
by userspace due to the vfs fallback behavior of calling
the security module to set the in-core inode state
for security.* attributes when the filesystem does not
provide an xattr handler.  No xattr handler required
as the inodes are pinned in memory and have no backing
store.

This is useful in allowing early userspace to label individual
files within a rootfs while still providing a policy-defined
default via genfs.

Change-Id: Ic45e49fd98b737faccc8bac694ee35660a108c39
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Do not ratelimit audit messages. We want to see them all.

Change-Id: I19c29788cc33b0f59e0bdfe04fe67c247239c559
Merge remote-tracking branch 'upstream/cm-10.2' into HEAD