1allow system_server self:vsock_socket create_socket_perms_no_ioctl; 2allow system_server hal_graphics_allocator_default:vsock_socket { read write getattr }; 3