1allow surfaceflinger self:process execmem; 2allow surfaceflinger ashmem_device:chr_file execute; 3allow surfaceflinger qemu_device:chr_file rw_file_perms; 4