allow system_app sysfs_display:file { getattr open read write };