system_core/shell_and_utilities, branch replicant-10

introduce auditctl and use it to configure SELinux throttling

2019-04-10T03:54:47+00:00

In an effort to ensure that our development community does not
introduce new code without corresponding SELinux changes, Android
closely monitors the number of SELinux denials which occur during
boot. This monitoring occurs both in treehugger, as well as various
dashboards. If SELinux denials are dropped during early boot, this
could result in non-determinism for the various SELinux treehugger
tests.

Introduce /system/bin/auditctl. This tool, model after
https://linux.die.net/man/8/auditctl , allows for configuring the
throttling rate for the kernel auditing system.

Remove any throttling from early boot. This will hopefully reduce
treehugger flakiness by making denial generation more predictible
during early boot.

Reapply the throttling at boot complete, to avoid denial of service
attacks against the auditing subsystem.

Delete pre-existing unittests for logd / SELinux integration. It's
intended that all throttling decisions be made in the kernel, and
shouldn't be a concern of logd.

Bug: 118815957
Test: Perform an operation which generates lots of SELinux denials,
      and count how many occur before and after the time period.

(cherry picked from commit be5e44679146d333c20e28bf99c52d168f422626)

Change-Id: I283cd56151d199cd66f0d217b49115460c4a01e5

install mini-keyctl to /system/bin

2019-01-31T21:48:04+00:00

This CL installs mini-keyctl for fsverity

Bug: 112038861
Test: build, flash and check mini-keyctl is properly installed.
Change-Id: Ib3adc1b7c92cae28caf72544987c7f3f23eafbbc

Add setuid/setgid capabilities to simpleperf_app_runner.

2019-01-22T19:20:10+00:00

Also add simpleperf_app_runner in shell utilities.

Bug: 118835348
Test: build and boot.
Test: run simpleperf_app_runner manually.

Change-Id: I538503dabfa8ff192f4b3029206a62613eacdf32

Add simpleperf in system shell utilities.

2019-01-17T23:28:00+00:00

This is to ship simpleperf on user device.

Bug: 118835348
Test: build.
Change-Id: Ice37fc672d4d273fff67b3ffe49f2e83929fdc9f

Update shell documentation for the current state of master.

2018-12-05T21:08:32+00:00

Test: N/A
Change-Id: I6efdd73ef44f376820f471dcfcd8005aa1e79cb0

Make unzip available.

2018-09-04T20:33:30+00:00

Bug: N/A
Test: N/A
Change-Id: I7f7a2e5d494536e5eb5f5e8744af224f31351c15

Move back to BSD grep, and make it available for recovery too.

2018-08-01T17:35:46+00:00

Bug: http://b/111849261
Bug: https://bugs.exim.org/show_bug.cgi?id=2294
Test: manual
Change-Id: Ia4f67b9f803c4f039d170f6d015a1bd2bb0ef23d

Restore tcpdump.

2018-07-27T16:31:01+00:00

tcpdump accidentally fell off the device when its Android.mk was converted
to Android.bp.

Bug: http://b/111654811
Test: builds
Change-Id: Ia49a6722b47c9017b6e573cb88f7a93f3d95db5d

Revert "Switch to PCRE grep."

2018-07-26T21:52:45+00:00

This reverts commit 90a018a87a605de6ad3550861143f1a5f7917570.

Not a clean revert because things have changed slightly, and I'm sticking
with the egrep/fgrep shell scripts for now.

Bug: http://b/111849261
Bug: https://bugs.exim.org/show_bug.cgi?id=2294
Test: manual
Change-Id: I72ae637c84f0eb1c2b5291db73ebff1628d54110

Merge "Split shell_and_utilities into partition parts."

2018-06-21T07:32:37+00:00