allow kernel { debugfs_ipc vfat }:dir search;
allow kernel vfat:file open;