1allow surfaceflinger mali_device:chr_file rw_file_perms;
2allow surfaceflinger hi_vdec_device:chr_file { read write open ioctl };
3allow surfaceflinger hi_overlay_file:file { read open getattr };
4allow surfaceflinger hi_vfmw_device:chr_file { read write open getattr ioctl };
5
6# neverallow
7#allow surfaceflinger vendor_file:file { read open getattr execute };
8