Device admin APIs for SELinux and MMAC.
Install-time MAC (MMAC) and corresponding tests.
Replace SEAndroid with SELinux.

Change-Id: Ibbe544a9f025d71ad416bc01cee2145b62d7b2d4
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Fix SELinux.java doc errors

This fixes five errors when building the Java docs. It also
removes two obsolete lines.

Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
Proper security labeling of multi-user data directories.

This patch covers 2 cases. When an app is installed
and the resulting data directory is created for all
existing users. And when a new user is created and
all existing app data directories are created for
the new user.

Change-Id: Iaba7c40645bc7b6cc823d613da0c3782acf6ddd5
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Fix App Ops permission mapping structure.

The entry to map the post notification op
to a permission is at the wrong offset
within the sOpPerms array. This patch
fixes the issue.

Change-Id: Ia241d274e484b6a24edbfb17b87bb887b61f1ee1
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
New AppOps controls.

New code allows policy to lock certain
operations that have already been granted
to apps on install. This will provide an
enterprise like approach that can work
in conjunction with the install-time
mac policy already in place.
Fix EOPS use with multi-user.

Need to ensure that the uid of the
correct caller is in place when
calling into pm.
Add new policy update receivers.

Add two new policy update mechanisms to the
ConfigUpdateInstallReceiver code. One is for
eops.xml and the other is for mac_permissions.xml.
Both will provide a way to create policy
under /data/security.
Create an eops policy cache.

New (packageName, seinfo) cache should help
speed up things. Also, have to remove from the
cache when the package removed function is
called.
Allow runtime reloads of eops policy.

New hooks to allow eops policy to be reloaded
at runtime from /data/security/eops.xml. No
reboot will be required in order to apply
new policy.