allow mm-qcamerad sysfs_camera:dir search; allow mm-qcamerad sysfs_camera:file { getattr open read write }; allow mm-qcamerad system_data_file:dir { add_name remove_name write }; allow mm-qcamerad system_data_file:sock_file { create unlink }; allow mm-qcamerad system_data_file:sock_file unlink; allow mm-qcamerad system_file:file execmod;