userdebug_or_eng(`
    allow { domain -appdomain } diag_device:chr_file rw_file_perms;
')