#============= sysfs_sec ==============
allow sysfs_sec sysfs:filesystem associate;