1gpu_access(surfaceflinger)
2allow surfaceflinger vendor_file:dir read;
3