sepolicy/app.te

# Allow apps to read /dev/dri. Needed to pass CTS
allow appdomain device:dir r_dir_perms;