Allow virtual_camera to access ION and DMABUF devices

ION And DMABUF are used by vendor to allocate graphic buffers needed by virtual_camera

Test: builds, VirtualCamera CTS
Bug: 382029702
Change-Id: Ibebca9c719bf1b54bb2d8f3e8c0d4ce565e4e275
diff --git a/private/virtual_camera.te b/private/virtual_camera.te
index 9b64c63..86174b1 100644
--- a/private/virtual_camera.te
+++ b/private/virtual_camera.te
@@ -44,6 +44,10 @@
 allow virtual_camera gpu_device:dir r_dir_perms;
 r_dir_file(virtual_camera, sysfs_gpu)
 
+# ION And DMABUF are used by vendor to allocate graphic buffers needed by virtual_camera
+allow cameraserver ion_device:chr_file rw_file_perms;
+allow cameraserver dmabuf_system_heap_device:chr_file r_file_perms;
+
 # Allow virtual camera to use graphics composer fd-s (fences).
 allow virtual_camera hal_graphics_composer:fd use;