Fix the Reliance MMS APN (mcc 405, mnc 01)

Change-Id: Ib1f3927aa55ae57d89e6389d685e340ca4b18063
SELinux: su: update policies

- Integrate policies from domain.te (fixes ES File Manager which uses unix socket)
- Allow platform_app to use su (fixes CM File Manager)

Change-Id: I39dd55e63b44590575bbe6d889c8d77141ba8545
Added telenor 'smart' ipv4v6 apn

per CYAN-6070

Change-Id: I7de3f829650672f1f3b668da01a8e5be05d82fec
cm: Turn it up to Eleven

Change-Id: I61250192604498d9259470cbf1a3bb72acfe9eb6
cm: Enable AudioFX

 * Drop DSPManager and libcyanogen-dsp. Devices should switch to
   standard Android effects or offload-capable versions.

Change-Id: I4f4eec5747e9073e576fe70e720ac3ffebb3fdd9
sepolicy: More rules for recovery

Change-Id: Ie50c04eb83cb9c62f679a1c1aa2ac482af159f7e
Revert "SELinux: su: update policies"

This reverts commit 04fd9192b05ae2655560a444711fe8859430f439.

Change-Id: I69e51fb6c151a48972cf81947c1c59c6f26f60e9
selinux: Workaround for devices with PR_SET_NO_NEW_PRIVS enforcement

PR_SET_NO_NEW_PRIVS blocks domain transitions from within app_process,
unless the new domain is bounded by the app's context. So we can't
switch to a domain that has perms not available to untrusted_app :(

This means any app can talk to the daemon, bypassing the su executable
client. That's not a good thing, and needs to be resolved.

Change-Id: I85b74f90b8737caaa193a0555b5262e7392519b2
Overlay for stats collection on cm.

Change-Id: I3ecec3507cd617a41ac2c37c5892f3e8ed0261f5
cm: add sepolicy entry for lockscreen wallpaper

Change-Id: Ie779392ab8118d192873a01ec5c7de3e5938ed17
Signed-off-by: Roman Birg <roman@cyngn.com>
Add Bulsatcom APN

Change-Id: Iedde9248dae63ce5ad030c7713192f0a64f1d038
(cherry picked from commit 12e4e186cb111adcaf628fae0c6471fd22770470)
Sepolicy: Add theme service as system service

Change-Id: Idfb690be5d35c03610165b914c0a3f2260e68956
cm: Remove prebuilt Term.apk

 * This is free on the Play Store, no need to bake it in.

Change-Id: Iffa24c3f2239ee06deee2fe7d1cec396200e1d79
cm: sepolicy: Remove vold external sdcard rules, moved to main sepolicy

Change-Id: I67756bad2c6e1361ecc0052003f2b4e5e4dbb007
selinux: Downgrade CMFM's domain

the filemanager doesn't need to be in platform_app. Put it in untrusted_app,
especially since it's a possible su client

Change-Id: I164853f2c8721d86b5b90677cb33032a3b491ff5