allow system_server init:binder call; allow system_server build_bootimage_prop:file r_file_perms; allow system_server vendor_security_patch_level_prop:file r_file_perms;