See [linux documentation](https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v2.html#device-controller) and [runc implementation](https://github.com/opencontainers/runc/blob/master/libcontainer/cgroups/fs2/devices.go)
