am: 6f754e48

Change-Id: I2f6dd5ba1e266b3d451533e518ec7f2fe24b262c

A recent security fix prevents the system UID from handing out Uri
permission grants directly from itself.  Instead, services need to
issue grants as the original calling UID to ensure that the caller
actually has access to the Uris.

Test: builds, boots, send/recv MMS works in primary/secondary users
Bug: 33231106
Change-Id: Ia9fe19843b52977c8a94ee5349b907beda1882fc
(cherry picked from commit 7ff418d9)

am: b058dc13

Change-Id: Idd1aeb4749741aa8bae76cf43ce3f2bdceff077d

am: 4a4b6bfa

Change-Id: Id479b2d27fd8396047312fe7259971c167b8d705

am: 6d3573e5

Change-Id: I501ff6230b9b5fa5d7232e52cfe326320c7edf65

am: 6f13f73b

Change-Id: I28627832c3ec765d6761afbf3fc508d1069c9582

am: 3e4faac3  -s ours

Change-Id: If1ea6da6679874ca13379222a28c529421c80b23

am: 2dfdf662  -s ours

Change-Id: Id06fac9dd096c1d821a1af7451db388446e9b156

Merge "DO NOT MERGE Do not call RecoverySystem with DPMS lock held" into lmp-dev am: af85feef  -s ours
am: d9c81559  -s ours

Change-Id: I9dfff7471440739580e7827cdb4484fad6900048

am: 051f0170  -s ours

Change-Id: Idcf3ce991369a6e41a3c2bd3aa9cd16d909eea13

am: af85feef  -s ours

Change-Id: Idf57ddf932e98dda06ac9c51f7e230d6a673882b

am: 14ed6119  -s ours

Change-Id: I1645d15febdfffd76cd2c592241549c507db1185

DO NOT MERGE Do not call RecoverySystem with DPMS lock held am: 8cdc0495 am: 21992d99 am: b278ed78  -s ours am: ec3e2b9d  -s ours
am: 483b561f

Change-Id: I065ff3640f19985157cd63c529019167c135489a

DO NOT MERGE Do not call RecoverySystem with DPMS lock held am: 8cdc0495 am: 21992d99 am: b278ed78  -s ours
am: ec3e2b9d  -s ours

Change-Id: I76bf4d69d98374a90da3cd4c74f0c2d892504a40

am: b278ed78  -s ours

Change-Id: Ib70440bdd1c60ed5eaa9b8c8152a4745f44cacd6

am: 21992d99

Change-Id: Ib5ba5eb63227be2fbf25a79e7f8f8e42b1cc9a2b

am: 8cdc0495

Change-Id: I7c1b9e9f785ef99575136d9af0b062dad759c17a

am: 3ced78bd

Change-Id: I4da6e2894de769fb028ad713290b62e38925294a

am: 835c8b3d

Change-Id: I080d11d3d7d6434b832f8ecb1ee93c17a6d7cb4a

am: 91a0bc95

Change-Id: I4c499b756c019d83a61e61da3065f31a4d8672f2

The system should never be extending Uri permission grants from
itself, since it automatically holds all the permissions.  Instead,
the system should always be a mediator between two specific app, and
it should be using startActivityAsCaller() if it needs to extend
permissions.

Blocking at this level fixes an entire class of confused deputy
security issues.

Test: builds, normal intent resolution UI works
Bug: 33019296, 32990341, 32879915, 32879772
Change-Id: Iaa57c393a386d8068e807d0dd0caccc89d8a11db

The system should never be extending Uri permission grants from
itself, since it automatically holds all the permissions.  Instead,
the system should always be a mediator between two specific app, and
it should be using startActivityAsCaller() if it needs to extend
permissions.

Blocking at this level fixes an entire class of confused deputy
security issues.

Test: builds, normal intent resolution UI works
Bug: 33019296, 32990341, 32879915, 32879772
Change-Id: Iaa57c393a386d8068e807d0dd0caccc89d8a11db

Note DPM.wipeData() on a secondary user is now blocking, just like
it's been always blocking on the primary user.

Bug 30681079

Change-Id: Ia832bed0f22396998d6307ab46e262dae9463838
Merged-In: Ia832bed0f22396998d6307ab46e262dae9463838

Note DPM.wipeData() on a secondary user is now blocking, just like
it's been always blocking on the primary user.

Bug 30681079

Change-Id: Ia832bed0f22396998d6307ab46e262dae9463838

Bug 30681079

Change-Id: Ia832bed0f22396998d6307ab46e262dae9463838

Previously we only re-evaluate provisioning for SIM swap case
The new logic covers both SIM swap case
(ABSENT->NOT_READY->UNKNOWN->READY->LOADED) and modem reset
case (NOT_READY->READY->LOADED)

Test: Manual
bug: 33815946

Change-Id: I9960123605b10d3fa5f3584c6c8b70b616acd6f8

am: 63a27d77

Change-Id: I01d332678c1c3fe57ed36062a9ed01b5f368a55d

am: 71d2a41d

Change-Id: Iab575b1efdd720c9cf9e32e0b056c99eff98deab

am: 4bd97eb8

Change-Id: I607f7ca9e160c4eed69a5baeff6b31d6db7c6b03

am: a9437bd1

Change-Id: Ib0b8db2357317dc3e680910c08f15f098baf2af9

Fix exploit where can hide the fact that a location was mocked am: a206a0f1 am: d417e548 am: 3380a775 am: 0a8978f0
am: 1684e5f3

Change-Id: I0ebd2856e2e2f3793273ba952b44dc77e85b021e

Fix exploit where can hide the fact that a location was mocked am: a206a0f1 am: d417e548 am: 3380a775
am: 0a8978f0

Change-Id: I693665a57465ec57f946fad57cda9ce48389408f

am: 3380a775

Change-Id: Ice61f337e1fcfd0569431538e475d94f9d205423

am: d417e548

Change-Id: I2f47020055f962b36f095137d75c9cbfe6b1a6db