1allow surfaceflinger self:process execmem;
2
3# Read GCE initial metadata file
4allow surfaceflinger initial_metadata_file:file r_file_perms;
5gpu_access(surfaceflinger)
6