1allow cameraserver system_file:dir { open read }; 2allow cameraserver hal_allocator:fd use; 3allow cameraserver gpu_device:chr_file { open read write ioctl }; 4