sepolicy/common/platform_app.te

allow platform_app self:vsock_socket create_socket_perms_no_ioctl;
allow platform_app hal_graphics_allocator_default:vsock_socket { read write getattr };