Snap for 4847375 from d53f0737 to oreo-vts-release

Change-Id: I2ac88492c25b593637546aa0923fb5ef9cf0d21a

public/domain.te

@@ -691,6 +691,7 @@ full_treble_only(`
         -installd
         -postinstall_dexopt
         -system_server
+        -mediaserver
     } vendor_app_file:{ file lnk_file } r_file_perms;
 
     # Limit access to /vendor/overlay

public/mediaserver.te

@@ -102,6 +102,9 @@ allow mediaserver hidl_token_hwservice:hwservice_manager find;
 allow mediaserver oemfs:dir search;
 allow mediaserver oemfs:file r_file_perms;
 
+# /vendor apk access
+allow mediaserver vendor_app_file:file r_file_perms;
+
 use_drmservice(mediaserver)
 allow mediaserver drmserver:drmservice {
     consumeRights