Keep system_server in SELinux permissive mode
The currently used OpenGL implementation requires executable memory
in system_server. This is normally not permitted on Android devices
because it makes code execution attacks inside system_server easier.
However, given that cuttlefish is not an actual Android device which
needs to protect user data, it would be fine to temporarily permit
executable memory in system_server. The hope is that the OpenGL
implementation will eventually change to not require this.
In terms of SELinux policy, the preferred temporary fix would've been
to grant system_server execmem power. However, this is not feasible
because global SELinux policy (system/server) contains a neverallow
against execmem in system_server. Thus, instead of granting execmem
to system_server, the only solution for now is to leave system_server
in permissive mode where system_server's actions violating SELinux
policy will not be denied.
Addressed SELinux denial:
denied { execmem } for scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=process
Test: Launch Chrome, navigate to ip6.me, press Home button --
device does not crash/reboot.
Bug: 28053261
Bug: 65201432
Empty commit to align Change-Ids
Change-Id: I95a9e0da3004873cd1944e2d426c6499d23c2972
