1 dontaudit surfaceflinger firmware_file:dir search; 2 dontaudit surfaceflinger kernel:system module_request; 3 allow surfaceflinger debugfs_ion:dir search; 4
