sepolicy/surfaceflinger.te

allow surfaceflinger appdomain:fd use;
allow surfaceflinger mali_device:chr_file rw_file_perms;