Consume devfs as read-only

Bug: 110563
Change-Id: I8e2fdded308eec9b262454e358e788b9a2641d10
Reviewed-on: https://fuchsia-review.googlesource.com/c/third_party/github.com/intel/media-driver/+/781003
Reviewed-by: Craig Stout <cstout@google.com>
diff --git a/fuchsia/meta/codec_runner_intel_gen.cml b/fuchsia/meta/codec_runner_intel_gen.cml
index 7470a38..abdec4f 100644
--- a/fuchsia/meta/codec_runner_intel_gen.cml
+++ b/fuchsia/meta/codec_runner_intel_gen.cml
@@ -16,7 +16,7 @@
     use: [
         {
             directory: "dev-gpu",
-            rights: [ "rw*" ],
+            rights: [ "r*" ],
             path: "/dev/class/gpu",
         },
         {