common/app.te

# allow application to access cnd domain and socket
unix_socket_connect(appdomain, cnd, cnd)

#Allow all apps to open and send ioctl to qdsp device
allow appdomain qdsp_device:chr_file { ioctl open };