1allow surfaceflinger self:process execmem;
2