1allow kernel vendor_fw_file:file {open read};
2allow kernel vendor_fw_file:dir search;
3