Snap for 4841225 from d53f0737 to oreo-cts-release

Change-Id: I87f8d5fff724688a8fec42c7335fa41001f5d033

public/domain.te

@@ -691,6 +691,7 @@ full_treble_only(`
         -installd
         -postinstall_dexopt
         -system_server
+        -mediaserver
     } vendor_app_file:{ file lnk_file } r_file_perms;
 
     # Limit access to /vendor/overlay

public/mediaserver.te

@@ -102,6 +102,9 @@ allow mediaserver hidl_token_hwservice:hwservice_manager find;
 allow mediaserver oemfs:dir search;
 allow mediaserver oemfs:file r_file_perms;
 
+# /vendor apk access
+allow mediaserver vendor_app_file:file r_file_perms;
+
 use_drmservice(mediaserver)
 allow mediaserver drmserver:drmservice {
     consumeRights