dontaudit surfaceflinger vendor_file:file read;
dontaudit surfaceflinger kernel:system module_request;
dontaudit surfaceflinger vendor_default_prop:file read;
userdebug_or_eng(`get_prop(surfaceflinger, vendor_display_prop)')
allow surfaceflinger debugfs_ion:dir search;

dontaudit surfaceflinger sysfs_msm_subsys:dir search;
dontaudit surfaceflinger sysfs_msm_subsys:file r_file_perms;