1dontaudit surfaceflinger firmware_file:dir search;
2dontaudit surfaceflinger vendor_file:file read;
3dontaudit surfaceflinger kernel:system module_request;
4allow surfaceflinger debugfs_ion:dir search;
5
6typeattribute surfaceflinger system_writes_vendor_properties_violators;
7set_prop(surfaceflinger, public_vendor_system_prop)
8