commit 84b96a6b689801f01d757cda51f9bc2f916deaee
author Jeff Vander Stoep <jeffv@google.com> Mon Mar 20 14:52:58 2017 -0700
committer Jeff Vander Stoep <jeffv@google.com> Tue Mar 21 12:16:31 2017 -0700
tree bc574cb5aa22f396f872073ab9c3d012467645fc
parent 00a03d424fbaf96c62863eae8a5cf279fcd7b8ab

Enforce one HAL per domain.

HALs are intended to be limited responsibility and thus limited
permission. In order to enforce this, place limitations on:
1. What processes may transition into a HAL - currently only init
2. What methods may be used to transition into a HAL - no using
   seclabel
3. When HALs exec - only allow exec with a domain transition.

Bug: 36376258
Test: Build aosp_marlin, aosp_bullhead, aosp_dragon. Neverallow rules
      are compile time assertions, so building is a sufficient test.

Change-Id: If4df19ced730324cf1079f7a86ceba7c71374131