allow untrusted_app unlabeled:file getattr;
allow untrusted_app efs_file:dir getattr;