r11170: root free pass on eventlog open access check