1allow shell rootfs:file { getattr read open };
2allow shell vendor_file:file { execute getattr open read execute_no_trans };
3# allow shell vendor_toolbox_exec:file { execute getattr };
4allow shell sysfs_hisi:file { getattr read open};
5