allow logpersist self:capability { dac_override dac_read_search };
allow logpersist cache_file:dir { add_name open read search write };
allow logpersist cache_file:file { append create getattr open };