sepolicy: Allow clients of netmgrd read access to netmgrd stat file

rild and location services - which are clients of netmgrd, needs to
have unicast netlink message communication with netmgrd. For this,
it needs to obtain the pid of the netmgrd. To determine the pid of
netmgrd, rild needs access to parse through the proc file system and
find the entry corresponding to netmgrd.

Fix denials faced while accessing the various files corresponding to
the processes in proc.
[   78.653558] type=1400 audit(2567.649:197): avc: denied { search }
for pid=1190 comm="rild" name="1" dev="proc" ino=11739
scontext=u:r:rild:s0 tcontext=u:r:init:s0 tclass=dir permissive=0

[   72.888233] type=1400 audit(1548.919:122): avc: denied { read }
for pid=1181 comm="rild" name="stat" dev="proc" ino=14756
scontext=u:r:rild:s0 tcontext=u:r:init:s0 tclass=file permissive=0

[   66.428453] type=1400 audit(2167.259:82): avc: denied { open }
for pid=1183 comm="rild" path="/proc/1/stat" dev="proc" ino=4086
scontext=u:r:rild:s0 tcontext=u:r:init:s0 tclass=file permissive=0

[  124.895876] type=1400 audit(2587.889:125): avc: denied { getattr }
for pid=1164 comm="rild" path="/proc/1/stat" dev="proc" ino=25356
scontext=u:r:rild:s0 tcontext=u:r:init:s0 tclass=file permissive=0

[  124.897171] type=1400 audit(2587.889:1257): avc: denied { search }
for pid=1164 comm="rild" name="2" dev="proc" ino=25252
scontext=u:r:rild:s0 tcontext=u:r:kernel:s0 tclass=dir permissive=0

[   96.631049] type=1400 audit(3925.959:261): avc: denied { search }
for pid=1176 comm="rild" name="297" dev="proc" ino=10500
scontext=u:r:rild:s0 tcontext=u:r:ueventd:s0 tclass=dir permissive=0

Allow these domains access to the proc stat files of netmgrd while
silently denying access to all other files.

Change-Id: I8d0d09cb9e85fdfa898f19a9eafe9ddaee6c208a
Sepolicy: Fix camera & surface flinger denials

Device node were not proper /dev/msm_camera was
labelled as audio_device which is wrong and
/dev/msm_rotator as well as audio_device, so
changing the label to appropriate to fix the false positive
denials.

Change-Id: I7b3ebbcb9999d794823ee7c0d7cad330d50be02e
Add secure policies for hbtp

Add secure policies for hbtp(host based touch processing)
service which uses device nodes through hbtp daemon

Change-Id: I6dbd17947b1d6d9d4e8f9c2af6771252783ab8a3
sepolicy: sensors: add net_bind_service capability

sensor daemon needs net_bind_service capability to work
on top of QMI.

Change-Id: Iaa6b3ab80774353f6cf2f5a42f4bfea0590bf14b
sepolicy: Update policy for time daemon

This patch updates the socket permission for time-daemon.

Change-Id: Ifc7d377585e9699a21ed569fe0402de35992c13b
Sepolicy : Added dac_override to qcomsysd.te

dac_override is added to self capabilities of qcom-system-daemon.

Change-Id: I110c0159a921d75d639abac6ce3df2ac13578a2e
Merge "Add secure policies for hbtp"
Merge "sepolicy: sensors: add net_bind_service capability"
Merge "sepolicy: Update policy for time daemon"
Merge "sepolicy: Allow clients of netmgrd read access to netmgrd stat file"
SEAndroid: Updated vold domain related policy

Updated vold domain related policy where it need access
to dirty_ratio on proc  and update kernel rules  where it need
access to the blk file on  vold device node

Change-Id: I0aca64860530d291e4c3a374e82a7d623498aa28
Seandroid: Moving connectionmanager policy to common

Moving policies related to connection manager to
common folder.

Change-Id: I9be8a072c8b7fda4cab2e246ec68dbcd8d21f562
Seandroid: Adding policies for IMS

Adding policy for IMS

Change-Id: I65e5ac5c9cf9b110a1fe68ceab1df6fa9814294d
Merge "Sepolicy: Fix camera & surface flinger denials"
Merge "SEAndroid: Updated vold domain related policy"
Merge "Seandroid: Moving connectionmanager policy to common"
Merge "Seandroid: Adding policies for IMS"
SEAndroid: Fixing few denials

This fixes the below issues

1. 744304 - SELinux Surf port Enumeration issue
   Files changed - mdm_helper.te
                 - rild.te
                 - file_contexts
                 - file.te
                 - rmt_storage.te
                 - device.te
2. 751137 - WIFI is not turning ON
   Files Changed - wpa.te
                 - system_server.te

3. Issues related to CTS testInitDomain and boot up
   denials for other domains.

CRs-fixed: 744304 751137

Change-Id: I2785e85592a10468a667be363e6115e27b76707f
Seandroid: Added rules to thermal-engine

Added rules to thermal-engine for access to thermal-sockets which
is needed for  mediaserver ,camera and couple of other services.

Change-Id: I7f5f89c112357ee595f275b20325fede40439924
sepolicy: allow system apps to access sensors settings file

system apps need to access sensors settings file in persist partition
to enable or disable sensors in debug & eng builds.

Change-Id: I2cd7ddface6cf7f21cd8b0294c71740945977cd9