dontaudit surfaceflinger vendor_file:file read;
dontaudit surfaceflinger kernel:system module_request;
dontaudit surfaceflinger vendor_default_prop:file read;
userdebug_or_eng(`get_prop(surfaceflinger, vendor_display_prop)')
allow surfaceflinger debugfs_ion:dir search;