kitakami-common: sepolicy: Address camera and secd denials

Change-Id: Ie0794b16e6898d162cc392dce9d9d55ce5f3bbd7

sepolicy/vendor/qcamerasvr.te

@@ -8,7 +8,7 @@ init_daemon_domain(qcamerasvr)
 allow qcamerasvr camera_data_file:dir { add_name remove_name write };
 allow qcamerasvr camera_data_file:sock_file { create unlink };
 allow qcamerasvr hal_camera_default:fd use;
-allow qcamerasvr ion_device:chr_file { open read };
+allow qcamerasvr ion_device:chr_file { open read ioctl };
 allow qcamerasvr mediaserver:fd use;
 allow qcamerasvr sysfs:file { open read write };
 allow qcamerasvr video_device:chr_file { ioctl open read write };
@@ -18,5 +18,6 @@ allow qcamerasvr camera_data_file:dir search;
 allow qcamerasvr camera_socket:sock_file unlink;
 allow qcamerasvr sysfs_graphics:file { open read };
 allow qcamerasvr ta_data_file:dir search;
-allow qcamerasvr ion_device:chr_file ioctl;
 allow qcamerasvr secd_exec:file { getattr read };
+allow qcamerasvr vendor_camera_data_file:dir { add_name remove_name write };
+allow qcamerasvr vendor_camera_data_file:sock_file { create unlink };

sepolicy/vendor/shell.te

@@ -106,3 +106,4 @@ allow shell wifi_prop:file { getattr open };
 allow shell wififtmd_prop:file { getattr open };
 allow shell wigig_prop:file { getattr open };
 allow shell xlat_prop:file { getattr open };
+allow shell secd_exec:file { getattr read };