# servicemanager allow servicemanager zygote:file { read open };