ion fix
diff --git a/device.te b/device.te
index 4d2dea3..cb15eeb 100644
--- a/device.te
+++ b/device.te
@@ -38,6 +38,7 @@
 type vcs_device, dev_type;
 type zero_device, dev_type;
 type fuse_device, dev_type;
+type ion_device, dev_type;
 
 # All devices have a uart for the hci
 # attach service. The uart dev node
diff --git a/file_contexts b/file_contexts
index fa22c87..72c95a5 100644
--- a/file_contexts
+++ b/file_contexts
@@ -28,6 +28,7 @@
 /dev/fuse		u:object_r:fuse_device:s0
 /dev/graphics(/.*)?	u:object_r:graphics_device:s0
 /dev/input(/.*)		u:object_r:input_device:s0
+/dev/ion		u:object_r:ion_device:s0
 /dev/kmem		u:object_r:kmem_device:s0
 /dev/log(/.*)?		u:object_r:log_device:s0
 /dev/mem		u:object_r:kmem_device:s0
diff --git a/mediaserver.te b/mediaserver.te
index 16bbefa..8236c79 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -24,3 +24,4 @@
 allow mediaserver sysfs:file rw_file_perms;
 # XXX Why?
 allow mediaserver apk_data_file:file { read getattr };
+allow mediaserver ion_device:chr_file rw_file_perms;