allow bootanim vendor_file:file { execute getattr open read }; allow bootanim sysfs:file write;