sepolicy/surfaceflinger.te

allow surfaceflinger sysfs:file rw_file_perms;

# Read from /data/local/tmp
allow surfaceflinger shell_data_file:dir search;
allow surfaceflinger shell_data_file:file { open getattr read };
allow surfaceflinger shell_data_file:lnk_file read;