sepolicy/app.te

# Allow apps to read /dev/dri. Needed to pass CTS
allow appdomain device:dir r_dir_perms;
allow { appdomain -isolated_app } host1x_device:chr_file rw_file_perms;