1allow hal_graphics_allocator_default graphics_device:dir search; 2allow hal_graphics_allocator_default graphics_device:chr_file { open read write ioctl map rw_file_perms}; 3