GitLab

* commit '9a676caa':
  Restrict zygote to system user.

* commit 'ced29ec3':
  Restrict zygote to system user.

* commit '87576b5f':
  Restrict zygote to system user.

am d0ffe384: am ce182cb8: Merge "Let users with SYSTEM permission set debug. properties" into jb-dev

* commit 'd0ffe384':
  Let users with SYSTEM permission set debug. properties

* commit 'ce182cb8':
  Let users with SYSTEM permission set debug. properties

Change-Id: Ieda3f7dd5dca5f6a8fc50b07822e6a875db030ad

* commit 'efc70215':
  Add encryption parameters to adb install

* commit 'bb2cba56':
  Add encryption parameters to adb install

CVE-2011-3918: Address denial of service attack against Android's
zygote process. This change enforces that only UID=system can
directly connect to zygote to spawn processes.

Change-Id: I89f5f05fa44ba8582920b66854df3e79527ae067

Change-Id: I92e5f6ace1bc9e711c14cb83533aeb99ab9ab9f7

am 03768b36: am b982bce7: Revert "libsysutils: NetlinkEvent: add support for interface xt_IDLETIMER events."

* commit '03768b36':
  Revert "libsysutils: NetlinkEvent: add support for interface xt_IDLETIMER events."

* commit 'b982bce7':
  Revert "libsysutils: NetlinkEvent: add support for interface xt_IDLETIMER events."

* commit 'cf417693':
  init: Add noexec mount option

* commit '64753635':
  init: Add noexec mount option

* commit 'a02ff986':
  init: Add noexec mount option

This reverts commit 731d831e.

Now that the xt_IDLETIMER uses the KOBJECT_UEVENT netlink, this
change is not needed anymore.

* commit 'e860d239':
  Prevent bit shifting if num bits is negative

* commit '9c1c2059':
  Prevent bit shifting if num bits is negative

* commit '5b3eb07e':
  Prevent bit shifting if num bits is negative

am 1875930a: (-s ours) am 8d3ea1d1: init: set perms for cpufreq interactive governor boost -- DO NOT MERGE

* commit '1875930a':
  init: set perms for cpufreq interactive governor boost -- DO NOT MERGE

* commit 'd8b46e7f':
  Add directory for forward locked apps in ASECs

* commit '75878ecc':
  Forward compatibility

* commit '8d3ea1d1':
  init: set perms for cpufreq interactive governor boost -- DO NOT MERGE

* commit 'f8bbaba5':
  Add directory for forward locked apps in ASECs

Change-Id: I6509cda358b4a75706afd01a5b5a36eabe492554
Signed-off-by: Todd Poynor <toddpoynor@google.com>

Forward locked apps on internal storage will be stored in ASEC
containers using ext4. This way permissions can be preserved whether on
internal or external storage.

Change-Id: I942f8f0743c210330a11e2b1d0204df7a5ddb2ae

Change-Id: I6509cda358b4a75706afd01a5b5a36eabe492554
Signed-off-by: Todd Poynor <toddpoynor@google.com>

Change-Id: Iae692bc1c54ffc241fd6853bbbdab19688c4f46b

* commit '307d9cfc':

* commit '980a59b4':
  Forward compatibility

Change-Id: Iedb6ea4e1cf66edda8d91e3d432cb010e697ed44

Change-Id: I3baae99d4da00d962d3afe6bdfc16e3eb04ede24

Change-Id: I51a5eb98fb3fa3e09f2eb75de128068572081046