Fix new selinux denials.

* Surfaceflinger access to tegra sysfs nodes.
    denied  { search } for  pid=124 comm="surfaceflinger" name="tegradc.0" dev=sysfs ino=775 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:sysfs_devices_tegradc:s0 tclass=dir
    denied  { read } for  pid=124 comm="surfaceflinger" name="device" dev=sysfs ino=3406 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:sysfs_devices_tegradc:s0 tclass=lnk_file
    denied  { read } for  pid=124 comm="surfaceflinger" name="enable" dev=sysfs ino=3432 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:sysfs_devices_tegradc:s0 tclass=file

* Allow mediaserver read/write to tegra video driver.
    denied  { read write } for  pid=17350 comm="Binder_2" name="nvhost-vi" dev=tmpfs ino=5363 scontext=u:r:mediaserver:s0 tcontext=u:object_r:nvhost_device:s0 tclass=chr_file

Change-Id: I683d93a65bb6dba9b803fd628d08916dc536b000
2 files changed