Allow vold to invoke blkid, use external ASECs.

Bug: 11175082
Change-Id: Ic1bd15e8729583be199551ec6baeb4acaf46c210
am 2abfe7d4: Allow vold to invoke blkid, use external ASECs.

* commit '2abfe7d4f72b0265b1dec31e675650c77998f4d6':
  Allow vold to invoke blkid, use external ASECs.
am 285d30e2: am 84d88314: Clarify the expectations for the unconfined template.

* commit '285d30e283a338c779017f4e8e277102e114f6b7':
  Clarify the expectations for the unconfined template.
am 7511f90c: am 28a711c8: Merge "Move unconfined domains out of permissive mode."

* commit '7511f90ca7f0e3b64507ac94eec54e8ddbcf898f':
  Move unconfined domains out of permissive mode.
am 77828e1e: am d7fd22e6: Confine bluetooth app.

* commit '77828e1e80651dc5c27004f8cfc936047548a682':
  Confine bluetooth app.
am 69eda0f0: am 5637099a: Confine all app domains, but make them permissive for now.

* commit '69eda0f0488b9ecbc0853fb0d543740881f64f7d':
  Confine all app domains, but make them permissive for now.
am 3a12f7b2: am c4a3b510: sysfs_devices_system_cpu should be a sysfs_type

* commit '3a12f7b2a9debe897358f6c4c88736729c48713e':
  sysfs_devices_system_cpu should be a sysfs_type
am 0e65c20d: am 73c5ea72: fix typo

* commit '0e65c20d9aac26ee9fcdaa5ac20c8bea4275b789':
  fix typo
am 75f670b2: am 067ffcc1: Merge "Confine mediaserver, but leave it permissive for now."

* commit '75f670b2090b3a3a17814c05c16b289ef3ecaea9':
  Confine mediaserver, but leave it permissive for now.
am 0aaacb3c: am dba93a9f: Merge "Make DEFAULT_SYSTEM_DEV_CERTIFICATE available in keys.conf"

* commit '0aaacb3c2fea875e9ba11c3e9fa4a8577125ae94':
  Make DEFAULT_SYSTEM_DEV_CERTIFICATE available in keys.conf
am f0ed17ed: am fd22922d: README: Add quip on keys.conf supporting env vars

* commit 'f0ed17edc01aa5891e77085307493ceab623afd3':
  README: Add quip on keys.conf supporting env vars
am 968a156d: am 5b38c47b: Allow bluetooth to write to bluetooth properties

* commit '968a156d981dee060566e92415df22db13e8b3c8':
  Allow bluetooth to write to bluetooth properties
am 9002232a: am a59c525c: Merge "Confine servicemanager, but leave it permissive for now."

* commit '9002232adbf5fe40b87b9470e8fc7f27f6095466':
  Confine servicemanager, but leave it permissive for now.
am 1680ce64: am 8c302d0f: Merge "Move sysfs_devices_system_cpu to the central policy."

* commit '1680ce64e953edbc173e017805c60db4b092c799':
  Move sysfs_devices_system_cpu to the central policy.
am 5298a4f6: am b3c48b66: Change the type on /dev/uinput to match /dev/uhid.

* commit '5298a4f6108695d44498c65f4af0c8eb15f40847':
  Change the type on /dev/uinput to match /dev/uhid.
am 57cc77ff: am cdf54ba7: Merge "Confine keystore, but leave it permissive for now."

* commit '57cc77ffca620d6993447c777f844f57c86d4394':
  Confine keystore, but leave it permissive for now.
am 30ab1f81: am 68ce74b4: Merge "readme: add info on generating pem files from apks"

* commit '30ab1f81f368528a382f2a54a2032b0394fd8a7a':
  readme: add info on generating pem files from apks
am a3dde731: am 95cd6e09: Merge "Make the servicemanager domain enforcing."

* commit 'a3dde731b17a5a185062d5772c4179372e185d54':
  Make the servicemanager domain enforcing.
am 514724db: am e45b7de4: Merge "Confine drmserver, but leave it permissive for now."

* commit '514724db211a9627b09a53fe126789eb0b68d8fe':
  Confine drmserver, but leave it permissive for now.
am 11214434: am 9056b19d: Merge "Add sepolicy-analyze tool."

* commit '1121443496923d06f9d9d1bbbf9051fab8e1f94d':
  Add sepolicy-analyze tool.