allow mediaserver { gpu_device nvhost_device }:chr_file rw_file_perms;