1allow surfaceflinger { knv_device }:chr_file rw_file_perms; 2allow surfaceflinger { sysfs_devices_system_cpu sysfs_devices_tegradc }:file rw_file_perms; 3allow surfaceflinger sysfs_devices_tegradc:dir r_dir_perms; 4allow surfaceflinger sysfs_devices_tegradc:lnk_file { open getattr read }; 5allow surfaceflinger sysfs_devices_system_cpu:dir w_dir_perms; 6 7# Kernel bug for Linux < 3.3: sysfs inodes can lose their security context 8# and revert to the base sysfs type. 9allow surfaceflinger sysfs:file write; 10