allow kernel persist_file:dir search;
allow kernel persist_file:file r_file_perms;