sepolicy[1/8]: start OmniROM common sepolicy

Rather than having to maintain out of tree changes, it is often
easier to maintain a hiearchy of changes, starting with the vendors
common config file. From there, inheriting products can pick up a base
and start to add or remove certain bits from it, making use of the
BOARD_SEPOLICY_* functions documented in external/sepolicy/README.

It requires: https://gerrit.omnirom.org/#/c/4795/

Signed-off-by: Humberto Borba <humberos@gmail.com>
Signed-off-by: William Roberts<wroberts@tresys.com>
Change-Id: I13244e5c6fc64ef5c3f94ff2bc03fcbc96619490
sepolicy[2/8]: exFAT Support
FUSE based exFAT Implementation

android: https://gerrit.omnirom.org/#/c/4448/
e2fsprogs: https://gerrit.omnirom.org/#/c/3191/
fuse: https://gerrit.omnirom.org/#/c/4443/
vold: https://gerrit.omnirom.org/#/c/4441/
vold: https://gerrit.omnirom.org/#/c/4442/
omni: https://gerrit.omnirom.org/#/c/4449/

it requires this revert:
https://gerrit.omnirom.org/#/c/4797/

Signed-off-by: Humberto Borba <humberos@gmail.com>
Signed-off-by: Utkarsh Gupta <utkarsh.eminem@gmail.com>
Change-Id: Iefe39efc09fe9b5948a06b76da94ac7ae7ee1257
sepolicy[3/8]: Fix asec mounting

Signed-off-by: Humberto Borba <humberos@gmail.com>
Change-Id: I92392f3d810dfaf8dfc35f5c9170178a651d28dc
sepolicy[4/8]: treat fuseblk as sdcard_external

Allow fuse-mounted NTFS/exFAT file systems to be written to

Signed-off-by: Humberto Borba <humberos@gmail.com>
Change-Id: I1492914dd269a305e27aba58e61064d853adf2bc
sepolicy[5/8]: allow installd to query ASEC size

installd need to query ASEC size on sdcard_external
to show on the Settings -> Apps page correctly.

Signed-off-by: Humberto Borba <humberos@gmail.com>
Change-Id: I2d9a49b8f0652f05d73d0ff464a3835595e2cc3c
sepolicy[6/8]: allow vold to create files on external sdcard

This is required for ASEC support. Vold can already create and
access directories, but do not yet have the permission for files.

Signed-off-by: Humberto Borba <humberos@gmail.com>
Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901
sepolicy[7/8]: allow vold to mount ext4 sdcard

When vold mounts an ext4 sdcard, it needs to force the context to
sdcard_external.

avc:  denied  { relabelfrom } for  pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:labeledfs:s0 tclass=filesystem
avc:  denied  { relabelto } for  pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem
avc:  denied  { relabelfrom } for  pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem

Signed-off-by: Humberto Borba <humberos@gmail.com>
Change-Id: I80f42fbdf738dee10958ce1bdc1893a41234f0d9
sepolicy[8]: Add specific file_contexts

Signed-off-by: Humberto Borba <humberos@gmail.com>
Change-Id: Ie70c59acedbb7be2f5b34a83c1d3d011f440ba05
Merge "sepolicy[1/8]: start OmniROM common sepolicy" into android-4.4
Merge "sepolicy[2/8]: exFAT Support FUSE based exFAT Implementation" into android-4.4
Merge "sepolicy[3/8]: Fix asec mounting" into android-4.4
Merge "sepolicy[4/8]: treat fuseblk as sdcard_external" into android-4.4
Merge "sepolicy[5/8]: allow installd to query ASEC size" into android-4.4
Merge "sepolicy[6/8]: allow vold to create files on external sdcard" into android-4.4
Merge "sepolicy[7/8]: allow vold to mount ext4 sdcard" into android-4.4
Merge "sepolicy[8]: Add specific file_contexts" into android-4.4
Merge remote-tracking branch 'omni/android-4.4' into android-4.4