sepolicy/mediaserver.te

allow mediaserver { nvhost_writable_device nvhost_device }:chr_file rw_file_perms;