gpu_access(surfaceflinger)
allow surfaceflinger vendor_file:dir read;