1 allow surfaceflinger { knv_device }:chr_file rw_file_perms; 2 allow surfaceflinger { sysfs_devices_system_cpu sysfs_devices_tegradc }:file rw_file_perms; 3 allow surfaceflinger sysfs_devices_tegradc:dir r_dir_perms; 4 allow surfaceflinger sysfs_devices_tegradc:lnk_file { open getattr read }; 5 allow surfaceflinger sysfs_devices_system_cpu:dir w_dir_perms; 6 7 # Kernel bug for Linux < 3.3: sysfs inodes can lose their security context 8 # and revert to the base sysfs type. 9 allow surfaceflinger sysfs:file write; 10