CgroupPermission makes me think permissions of the cgroup as opposed to access to the device permissions. But maybe its just me :P