sepolicy/vendor/priv_app.te

# /dev/mali0
allow priv_app gpu_device:chr_file rw_file_perms;

allow priv_app debugfs_ion:dir search;
allow priv_app debugfs_mali:dir search;
allow priv_app debugfs_mali_mem:dir search;

allow priv_app sysfs_zram:file r_file_perms;