Use ION allocator for graphics
Add more graphics permissions rules