1 # Grant GPU access to SurfaceFlinger 2 allow surfaceflinger gpu_device:chr_file rw_file_perms; 3 4 allow surfaceflinger sysfs:file rw_file_perms; 5 6 # Read from /data/local/tmp 7 allow surfaceflinger shell_data_file:dir search; 8 allow surfaceflinger shell_data_file:file { open getattr read }; 9 allow surfaceflinger shell_data_file:lnk_file read; 10