sepolicy/app.te

allow appdomain mali_device:chr_file rw_file_perms;
allow appdomain ion_device:chr_file w_file_perms;