1# Few system/untrusted_app_xx apps eg. deskclock,
2# gallery3d et al. need read-only access to /dev/dri
3# as well, otherwise they don't open and crash.
4gpu_access(appdomain -isolated_app)
5