1dontaudit surfaceflinger vendor_file:file read; 2dontaudit surfaceflinger kernel:system module_request; 3dontaudit surfaceflinger vendor_default_prop:file read; 4userdebug_or_eng(`get_prop(surfaceflinger, vendor_display_prop)') 5allow surfaceflinger debugfs_ion:dir search; 6 7dontaudit surfaceflinger sysfs_msm_subsys:dir search; 8dontaudit surfaceflinger sysfs_msm_subsys:file r_file_perms; 9