allow priv_app device:dir r_dir_perms;
allow priv_app persist_file:filesystem getattr;