replicant-vendor_replicant/sepolicy/surfaceflinger.te

allow surfaceflinger self:process execmem;
allow surfaceflinger ashmem_device:chr_file execute;