allow kernel block_device:dir search; allow kernel debug_block_device:blk_file rw_file_perms;