selinux: Workaround for devices with PR_SET_NO_NEW_PRIVS enforcement

PR_SET_NO_NEW_PRIVS blocks domain transitions from within app_process,
unless the new domain is bounded by the app's context. So we can't
switch to a domain that has perms not available to untrusted_app :(

This means any app can talk to the daemon, bypassing the su executable
client. That's not a good thing, and needs to be resolved.

Change-Id: I85b74f90b8737caaa193a0555b5262e7392519b2
Overlay for stats collection on cm.

Change-Id: I3ecec3507cd617a41ac2c37c5892f3e8ed0261f5
cm: add sepolicy entry for lockscreen wallpaper

Change-Id: Ie779392ab8118d192873a01ec5c7de3e5938ed17
Signed-off-by: Roman Birg <roman@cyngn.com>
Add Bulsatcom APN

Change-Id: Iedde9248dae63ce5ad030c7713192f0a64f1d038
(cherry picked from commit 12e4e186cb111adcaf628fae0c6471fd22770470)
Sepolicy: Add theme service as system service

Change-Id: Idfb690be5d35c03610165b914c0a3f2260e68956
cm: Remove prebuilt Term.apk

 * This is free on the Play Store, no need to bake it in.

Change-Id: Iffa24c3f2239ee06deee2fe7d1cec396200e1d79
cm: sepolicy: Remove vold external sdcard rules, moved to main sepolicy

Change-Id: I67756bad2c6e1361ecc0052003f2b4e5e4dbb007
selinux: Downgrade CMFM's domain

the filemanager doesn't need to be in platform_app. Put it in untrusted_app,
especially since it's a possible su client

Change-Id: I164853f2c8721d86b5b90677cb33032a3b491ff5
sepolicy: allow recovery read access to /data/media/ files and dirs

Change-Id: I41173d72e86f9cf4d79f7c46166eeb71dc19d2f4
Update Reliance RTel APN's.

Change-Id: I64cfaef7de1b506059fc0f79bc24dd78ca0555d2
(cherry picked from commit 5f37ad9684c7117b12f599af1f25dbb6e0419687)
cm: Remove obsolete persist.sys.dalvik.multithread property

Change-Id: I0d04f50dcca1454a7f38d8076b8418f67b140906
selinux: New rw privileges for themes

- New theme_data_file context for files under /data/system/theme
- Permit systemserver to create files/dirs under /data/resource-cache
- Permit systemserver to create files/dirs under /data/system/theme

Change-Id: Id597fc20b477ea395a8631623f26a7edde280799
sepolicy: remove stray + in type statement

Change-Id: Ic34c9ae32658541064a63153612145c6fd3d55b3
Change roaming protocol for "telenor.smart" to IPv4

* As per info on telenor.no

Change-Id: I7d5febd07e362d38880b454a45a3b692f52a954c
apn: fix some data issues when using sprint operator numerics.

this fixes issues like
https://jira.cyanogenmod.org/browse/NIGHTLIES-404

requires:
http://review.cyanogenmod.org/#/c/79764/

Change-Id: I595788c3bf529640df16aaa75551bb55b4c0f036
Merge remote-tracking branch 'cm/cm-12.0' into lollipop

Conflicts:
	config/common.mk