sdm710-common: Import full CACert stack

* Used by xtra-daemon
* Nothing uses 32-bit libjnihelper.so which belongs to CACert stack, remove it
* Fix the denials while we're at it

Test:
1. Download and open "GPS Test" app
2. Perform Menu > AGPS > Clear and update
3. Confirm there's no error about getting cacert service on logcat

Change-Id: Iace09f6d7a05e0a2ae8ef8048a19a391f537237e

proprietary-files.txt

@@ -45,6 +45,12 @@ vendor/lib/vendor.qti.hardware.bluetooth_sar@1.1.so
 vendor/lib64/vendor.qti.hardware.bluetooth_sar@1.0.so
 vendor/lib64/vendor.qti.hardware.bluetooth_sar@1.1.so
 
+# CACert
+-vendor/app/CACertService/CACertService.apk
+vendor/lib64/libcacertclient.so
+vendor/lib64/libjnihelper.so
+vendor/lib64/vendor.qti.hardware.cacert@1.0.so
+
 # CDSP
 vendor/bin/cdsprpcd
 vendor/etc/init/vendor.qti.cdsprpc-service.rc
@@ -310,7 +316,6 @@ vendor/lib64/hw/android.hardware.gnss@2.1-impl-qti.so
 vendor/lib64/hw/vendor.qti.gnss@4.0-impl.so
 vendor/lib64/libaoa.so
 vendor/lib64/libbatching.so
-vendor/lib64/libcacertclient.so
 vendor/lib64/libcdfw.so
 vendor/lib64/libcdfw_remote_api.so
 vendor/lib64/libdataitems.so
@@ -321,7 +326,6 @@ vendor/lib64/libgnsspps.so
 vendor/lib64/libgps.utils.so
 vendor/lib64/libizat_client_api.so
 vendor/lib64/libizat_core.so
-vendor/lib64/libjnihelper.so
 vendor/lib64/liblbs_core.so
 vendor/lib64/libloc_api_v02.so
 vendor/lib64/libloc_core.so
@@ -450,7 +454,6 @@ vendor/lib/libgcs-calwrapper.so
 vendor/lib/libgcs-ipc.so
 vendor/lib/libgcs-osal.so
 vendor/lib/libgcs.so
-vendor/lib/libjnihelper.so
 vendor/lib/liblistensoundmodel2.so
 vendor/lib/libmulawdec.so
 vendor/lib/librice.so

sepolicy/vendor/location.te

@@ -0,0 +1 @@
+allow location hal_cacert_hwservice:hwservice_manager find;

sepolicy/vendor/qtidataservices_app.te

@@ -0,0 +1 @@
+allow qtidataservices_app qtidataservices_app:socket { create read write }; # { ioctl } hits neverallow