1allow shell serial_device:chr_file { getattr ioctl read write };
2