allow mediaserver persist_drm_file:dir search; allow mediaserver persist_drm_file:file rw_file_perms; allow mediaserver sysfs_camera:dir search; allow mediaserver sysfs_camera:file { getattr open read }; allow mediaserver system_data_file:sock_file { write }; allow mediaserver system_file:file execmod; # for libmmjpeg