allow kernel {tmpfs system_block_device}:blk_file read;