yeah i covered the mako gpu thing  however  right now  dev graphics fb num  is a graphics device  i am more concerned that the raw file object is passed back via these two permissions android permission read frame buffer android permission access surface flinger now these perms are for internal apps  so i am ok with killing them for untrusted app domain 