Replace isolated_app with isolated_app_all (linaro)
Replace certain policies for isolated_app with the newly introduced
isolated_app_all to avoid hitting neverallow statement.
Bug: 267487579
Test: m
Change-Id: I42a798c4ba8bfe9237e9c1f16d478e5059061772
diff --git a/sepolicy/app.te b/sepolicy/app.te
index 890e6e6..27030c9 100644
--- a/sepolicy/app.te
+++ b/sepolicy/app.te
@@ -1,4 +1,4 @@
# Few system/untrusted_app_xx apps eg. deskclock,
# gallery3d et al. need read-only access to /dev/dri
# as well, otherwise they don't open and crash.
-gpu_access(appdomain -isolated_app)
+gpu_access(appdomain -isolated_app_all)