cf: add vndbinder access to DRM and Camera HALs
Using vndbinder is an implementation detail of default drm and camera
HALs. Same permissions are present in Pixel device sepolicy.
Bug: 28053261
Test: boot cuttlefish without drm and camera HAL denials
Change-Id: Id2b8d126f2e0cf1d4ecfb35bef3ade1c0eaec600
diff --git a/shared/sepolicy/hal_camera_default.te b/shared/sepolicy/hal_camera_default.te
new file mode 100644
index 0000000..a901a4b
--- /dev/null
+++ b/shared/sepolicy/hal_camera_default.te
@@ -0,0 +1 @@
+vndbinder_use(hal_camera_default)
diff --git a/shared/sepolicy/hal_drm_default.te b/shared/sepolicy/hal_drm_default.te
new file mode 100644
index 0000000..0acbc0d
--- /dev/null
+++ b/shared/sepolicy/hal_drm_default.te
@@ -0,0 +1 @@
+vndbinder_use(hal_drm_default)
