1allow surfaceflinger mali_device:chr_file rw_file_perms; 2allow surfaceflinger hi_vdec_device:chr_file { read write open ioctl }; 3allow surfaceflinger hi_overlay_file:file { read open getattr }; 4allow surfaceflinger hi_vfmw_device:chr_file { read write open getattr ioctl }; 5 6# neverallow 7#allow surfaceflinger vendor_file:file { read open getattr execute }; 8