Backport: PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs

Original message:

Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs

With this set, a lot of dangerous operations (chroot, unshare, etc)
become a lot less dangerous because there is no possibility of
subverting privileged binaries.

This patch completely breaks apparmor.  Someone who understands (and
uses) apparmor should fix it or at least give me a hint.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>

Change-Id: I370e8cc0fd6046c0b733c35447698e4e4531454f
(cherry picked from commit d803f7a504a0522ab4d81a6e37b50d3df8985da6)
backport uhid driver from linux 3.8

the userspace HID driver is needed by the JB bluetooth stack to process input
from bluetooth keyboards.

Change-Id: I60d4bd309a23dfd1558d985fa76d9699f33103ed
netfilter: xt_qtaguid: update to msm-3.4

AU_LINUX_ANDROID_JB_MR2.04.03.00.110.011
Preserve compatibility with 2.6.35 kernel.

psyke83: cleaned up some whitespace differences

Change-Id: I8912242c95270f21b0d21dc859c56f0d0342d8c0