rework firware symlink
add frandom/erandom permission