allow domain init_tmpfs:file read;