dontaudit zygote proc_cmdline:file r_file_perms;