target/board/generic/sepolicy/surfaceflinger.te

allow surfaceflinger self:process execmem;
allow surfaceflinger ashmem_device:chr_file execute;