1 allow mediaserver sysfs_soc:dir search; 2 allow mediaserver sysfs_soc:file r_file_perms; 3 # Only allow gpu ioctl commands that have been demonstrated to be necessary. 4 allowxperm mediaserver gpu_device:chr_file 5 ioctl { gpu_ioctls unpriv_tty_ioctls }; 6
