1 allow surfaceflinger self:process execmem; 2 allow surfaceflinger ashmem_device:chr_file execute; 3 4 typeattribute surfaceflinger system_writes_vendor_properties_violators; 5 set_prop(surfaceflinger, qemu_prop) 6