1allow zygote self:process execmem;
2allow zygote self:capability sys_nice;
3