1 allow hal_graphics_allocator_default graphics_device:dir search; 2 allow hal_graphics_allocator_default graphics_device:chr_file { ioctl open read write }; 3