allow kernel per_boot_file:file r_file_perms;