sepolicy: More rules for recovery

Change-Id: Ie50c04eb83cb9c62f679a1c1aa2ac482af159f7e
Revert "SELinux: su: update policies"

This reverts commit 04fd9192b05ae2655560a444711fe8859430f439.

Change-Id: I69e51fb6c151a48972cf81947c1c59c6f26f60e9
selinux: Workaround for devices with PR_SET_NO_NEW_PRIVS enforcement

PR_SET_NO_NEW_PRIVS blocks domain transitions from within app_process,
unless the new domain is bounded by the app's context. So we can't
switch to a domain that has perms not available to untrusted_app :(

This means any app can talk to the daemon, bypassing the su executable
client. That's not a good thing, and needs to be resolved.

Change-Id: I85b74f90b8737caaa193a0555b5262e7392519b2
Overlay for stats collection on cm.

Change-Id: I3ecec3507cd617a41ac2c37c5892f3e8ed0261f5
cm: add sepolicy entry for lockscreen wallpaper

Change-Id: Ie779392ab8118d192873a01ec5c7de3e5938ed17
Signed-off-by: Roman Birg <roman@cyngn.com>
Merge branch 'cm-12.0' of https://github.com/CyanogenMod/android_vendor_cm into cm-12.0