allow macloader efs_file:file { read open getattr };
allow macloader efs_file:dir search;