allow drmserver sdcard_external:file open;
allow drmserver self:process execmem;