Merge "Neverallow app open access to /dev/ashmem"