1 allow surfaceflinger appdomain:fd use; 2 allow surfaceflinger mali_device:chr_file rw_file_perms; 3