| dontaudit surfaceflinger vendor_file:file read; | |
| dontaudit surfaceflinger kernel:system module_request; | |
| dontaudit surfaceflinger vendor_default_prop:file read; | |
| userdebug_or_eng(`get_prop(surfaceflinger, vendor_display_prop)') | |
| allow surfaceflinger debugfs_ion:dir search; |