ion fix

device.te

@@ -38,6 +38,7 @@ type video_device, dev_type;
 type vcs_device, dev_type;
 type zero_device, dev_type;
 type fuse_device, dev_type;
+type ion_device, dev_type;
 
 # All devices have a uart for the hci
 # attach service. The uart dev node

file_contexts

@@ -28,6 +28,7 @@
 /dev/fuse		u:object_r:fuse_device:s0
 /dev/graphics(/.*)?	u:object_r:graphics_device:s0
 /dev/input(/.*)		u:object_r:input_device:s0
+/dev/ion		u:object_r:ion_device:s0
 /dev/kmem		u:object_r:kmem_device:s0
 /dev/log(/.*)?		u:object_r:log_device:s0
 /dev/mem		u:object_r:kmem_device:s0

mediaserver.te

@@ -24,3 +24,4 @@ allow mediaserver qemu_device:chr_file rw_file_perms;
 allow mediaserver sysfs:file rw_file_perms;
 # XXX Why?
 allow mediaserver apk_data_file:file { read getattr };
+allow mediaserver ion_device:chr_file rw_file_perms;