Use our locally built kernel with SELinux enabled.
Initial selinux policy.

Change-Id: I85c3b02ae443480cb431ed13c8b06e305b1287cd
dontaudit domain access to chr_file.

Most processes want to read/write to rootfs on a
chr_file. Probably means, init or some other ancestor of
these processes has failed to close its descriptor and
thus every descendant inherits it by default.

Change-Id: Id946fee94ea375abba71f6e073746dc3283da23d
Add new function fs (ffs) type.

functionfs is mounted at /dev/usb-ffs/adb.
Give adb daemon read/write prmissions.

Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Change-Id: I370ebd14e5dacd848b48f86e5b71af149e07787c
Add gpsd policy.

gpsd on manta creates:
file /data/.gpsd.lock
fifo /data/.gps.interface.pipe.to_gpsd
fifo /data/.gps.interface.pipe.to_jni
file /data/gldata.sto

Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Change-Id: Ic6192d5afb266cef7166f3a6dfc16710ceead215
Create new label for graphics device.

/dev/mali0 needs write access from
appdomain type. Create a new label
separate from normal graphics_device
label to allow such write access.

Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Change-Id: I0da43eeba22c454ba86d801424c2533c8e79cfb5
Remove watchdog node label.

Moved watchdog device node label to generic
policy.

Change-Id: I1b75049fcefcd8d71b9082d87a3adb7c9f6b562d
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Relabel mali0_device as mali_device.

Change-Id: I6950e7a18905c6a57d4f36208a2673504f2fd09c
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Add ump device type.

This was moved from generic to device specific.

Change-Id: I02751e2b29081f94ad8e4358acc848ee05546124
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Merge tag 'android-4.2.2_r1' into seandroid-4.2

Android 4.2.2 release 1
Label the .gps.interface.pipe.to_jni pipe with gps_data_file.

Defines a name-based type transition for the named pipe.
Depends on I046fa9f7122f77506c70b2c735345bc0194935df

Change-Id: I5adee36b9309743d97c567df5f1e40ea76f34376
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Sync with seandroid branch sepolicy.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Merge remote-tracking branch 'seandroid/seandroid-4.2' into sm-jb-mr1

Signed-off-by: Paul Beeler <sparksco@gmail.com>
Manta: Mark internal storage as primary

Change-Id: I6c73b859736d48d7c2279beedda44ceb6a3d5146