reconcile aosp (3a8c5dc0) after branching. Please do not merge.

Change-Id: Ic8ee83ed6ffef02bddd17e1175416fc2481db7b2

bootanim.te

@@ -8,3 +8,6 @@ binder_use(bootanim)
 binder_call(bootanim, surfaceflinger)
 
 allow bootanim gpu_device:chr_file rw_file_perms;
+
+# /oem access
+allow bootanim oemfs:dir search;

system_server.te

@@ -388,6 +388,9 @@ allow system_server block_device:dir search;
 # Clean up old cgroups
 allow system_server cgroup:dir { remove_name rmdir };
 
+# /oem access
+allow system_server oemfs:dir search;
+
 ###
 ### Neverallow rules
 ###