allow priv_app sysfs_graphics:file { open read };
allow priv_app zygote:unix_stream_socket { getopt };