1allow kernel persist_file:dir search;
2allow kernel persist_file:file r_file_perms;
3