allow rfs_access persist_file:file { getattr open read rename setattr unlink write };
allow rfs_access vendor_tombstone_data_file:dir search;
allow rfs_access self:capability { dac_override dac_read_search net_raw };
allow rfs_access unlabeled:file { getattr setattr };