sepolicy/plat_private/surfaceflinger.te

   1 allow surfaceflinger surfaceflinger_tmpfs:file { map };
   2 allow surfaceflinger tmpfs:lnk_file { read };
   3 allow surfaceflinger self:capability { sys_tty_config };
   4
   5 allowxperm surfaceflinger gpu_device:chr_file ioctl {
   6         0x5605
   7         0x6409
   8         0x640a
   9         0x640b
  10         0x641e
  11         0x641f
  12         0x6457
  13         0x6458
  14         0x645b
  15         0x645e
  16         0x645f
  17         0x6461
  18         0x6462
  19         0x6469
  20         0x6466
  21         0x646c
  22         0x64a2
  23         0x64b0
  24 };