src,permission: implicit allow-fs-read to app entrypoint

src,permission: implicit allow-fs-read to app entrypoint #63857