#============= sdcardd ==============
allow sdcardd unlabeled:dir { getattr open read search };
allow sdcardd unlabeled:file { getattr open read };