sepolicy/mediadrmserver.te

allow mediadrmserver device:dir r_dir_perms;
allow mediadrmserver host1x_device:chr_file rw_file_perms;
dontaudit mediadrmserver gpu_device:chr_file rw_file_perms;