1allow cameraserver system_file:dir { open read };
2allow cameraserver hal_allocator:fd use;
3