1allow zygote self:process execmem; 2allow zygote self:capability sys_nice; 3allow zygote qemu_device:chr_file rw_file_perms; 4