allow toolbox rootfs:dir { open read setattr };