Allow oemfs search for system_server and bootanim

Address denials in devices that use /oem

Change-Id: I80b76bb58bab9b6c54d6550eb801664d82a4d403

bootanim.te

@@ -8,3 +8,6 @@ binder_use(bootanim)
 binder_call(bootanim, surfaceflinger)
 
 allow bootanim gpu_device:chr_file rw_file_perms;
+
+# /oem access
+allow bootanim oemfs:dir search;

system_server.te

@@ -388,6 +388,9 @@ allow system_server block_device:dir search;
 # Clean up old cgroups
 allow system_server cgroup:dir { remove_name rmdir };
 
+# /oem access
+allow system_server oemfs:dir search;
+
 ###
 ### Neverallow rules
 ###