dontaudit domain rootfs:chr_file { read write };