#============= system_server ============== allow system_server vendor_file:file { execute getattr open read };