vendor/google/untrusted_app_all.te

# Allows Exoplayer(and other applications) access to the vstream-secure DMA-BUF heap
# for secure video playback
allow untrusted_app_all dmabuf_system_secure_heap_device:chr_file r_file_perms;

dontaudit untrusted_app_all proc_vendor_sched:dir search;
dontaudit untrusted_app_all proc_vendor_sched:file write;