sepolicy/hal_drm_default.te

allow hal_drm_default mmz_userdev_device:chr_file { ioctl open read write };
allow hal_drm_default debugfs_trace_marker:file { open write };
allow hal_drm_default vndbinder_device:chr_file { open read write ioctl };
allow hal_drm_default vendor_data_file:dir { write add_name create open read };
allow hal_drm_default vendor_data_file:file { create read write open getattr};
#allow hal_drm_default system_data_file:dir { write };