Merge tag 'v3.0.86' of git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable

This is the 3.0.86 stable release

Change-Id: Ica791b3df05d7cc9df5a9c3eebe6e70a782a2113
yaffs: fix getxattr support

When passed a buffer size of 0, getxattr(2) is documented to return the
size of the attribute value.  However, yaffs returns -ERANGE instead.
This breaks SELinux usage of getxattr.  Fix yaffs to return the
attribute size in this case.

Change-Id: I410e96ad36741b8fd6aef70d0aabc22391c8d5ac
Signed-off-by:  Stephen Smalley <sds@tycho.nsa.gov>
yaffs: set security attribute at file creation

Add support to yaffs to set the security attribute of new inodes when
they are created.  This parallels similar support in other filesystems,
and is a requirement for SELinux and other MAC systems.

Change-Id: I46ffb4f6aabebfa7bd66a502b6d890998b0da08c
Signed-off-by:  Stephen Smalley <sds@tycho.nsa.gov>
Do not ratelimit audit messages. We want to see them all.

Change-Id: I19c29788cc33b0f59e0bdfe04fe67c247239c559
Add permission checking for binder IPC.

Change-Id: Ia224e29427d39a6eeb0800a65ad2a8df2e91bebc
Do not apply permission checks to private files.

Change-Id: I472d9630de5113667c289dce7e4fdc8eace04e36
Fix security_binder_transfer_binder hook.

Drop the owning task argument to security_binder_transfer_binder
since ref->node->proc can be NULL (dead owner?).
Revise the SELinux checking to apply a single transfer check between
the source and destination tasks.  Owning task is no longer relevant.
Drop the receive permission definition as it is no longer used.

This makes the transfer permission similar to the call permission; it is only
useful if you want to allow a binder IPC between two tasks (call permission)
but deny passing of binder references between them (transfer permission).

Change-Id: I6ec460ede8e07dadc9f52b61534b2b0021617302
aries | p1: Enable SELinux

Change-Id: I6dc5df8e5e4e1aafe0a450ccc291fda1e5353f8e
Signed-off-by: Chirayu Desai <cdesai@cyanogenmod.org>
gpu: pvr: fix build with new toolchain

error: ‘sDevPAddr.uiAddr’ may be used uninitialized in this function [-Werror=maybe-uninitialized]

Change-Id: Ibf2394b6e818dbf73927bfa329221f1953c6a624
Merge tag 'v3.0.88' of git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable

This is the 3.0.88 stable release
ramdisk: enable TRIM in lvm

Not sure if the underlying hardware supports it or not, but
enabling it here doesn't hurt

Change-Id: I3c2a8cd72a3e7bf1f260e128f6c55e201fe4ac54
netfilter: xt_qtaguid: remove AID_* dependency for access control

qtaguid limits what can be done with /ctrl and /stats based on group
membership.
This changes removes AID_NET_BW_STATS and AID_NET_BW_ACCT, and picks
up the groups from the gid of the matching proc entry files.

Signed-off-by: JP Abgrall <jpa@google.com>
Change-Id: I42e477adde78a12ed5eb58fbc0b277cdaadb6f94
netfilter: xt_qtaguid: extend iface stat to report protocols

In the past the iface_stat_fmt would only show global bytes/packets
for the skb-based numbers.
For stall detection in userspace, distinguishing tcp vs other protocols
makes it easier.
Now we report
  ifname total_skb_rx_bytes total_skb_rx_packets total_skb_tx_bytes
  total_skb_tx_packets {rx,tx}_{tcp,udp,ohter}_{bytes,packets}

Bug: 6818637
Signed-off-by: JP Abgrall <jpa@google.com>
netfilter: xt_qtaguid: Allow tracking loopback

In the past it would always ignore interfaces with loopback addresses.
Now we just treat them like any other.
This also helps with writing tests that check for the presence
of the qtaguid module.

Signed-off-by: JP Abgrall <jpa@google.com>
netfilter: qtaguid: rate limit some of the printks

Some of the printks are in the packet handling path.
We now ratelimit the very unlikely errors to avoid
kmsg spamming.

Signed-off-by: JP Abgrall <jpa@google.com>
Merge tag 'v3.0.89' of git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable into HEAD

This is the 3.0.89 stable release
p1: stage1 init: link fstab as well

Change-Id: I0d6463101663a9b01ee6ef36748359a3f9c69ea3
aries: defconfig: compile in FUSE

Required for FUSE-based file system such as NTFS, exFAT

Change-Id: I3a5ba55bf17e6790dc85f035356df0f3a98bd1d8
aries: init: do not check for existance of update.zip

The file path is on /storage/sdcard0 instead of /sdcard
(and may even be on the external SD)

Change-Id: Ie9795cd3095ad21e5acca9d2c12a929f2604cc84
p1: stage1 init: fix sdcard mounts

fstab.p1[x] link is required on recovery mode
for p1 latin variant (p1ln)

Signed-off-by: Humberto Borba <humberos@gmail.com>
Change-Id: I0dbc1f03de61df203f6783e10e90e38a88babb2b