allow mediaserver self:socket create_socket_perms;
allow mediaserver { firmware_camera }:file r_file_perms;
allow mediaserver firmware_camera:dir r_dir_perms;
allow mediaserver camera_data_file:file rw_file_perms;
allow mediaserver volume_data_file:file create_file_perms;
allow mediaserver volume_data_file:dir create_dir_perms;
allow mediaserver mfc_device:chr_file rw_file_perms;
allow mediaserver system_data_file:file { execmod };
allow mediaserver system_file:file { execmod };
allow mediaserver mnt_user_file:lnk_file { read };
allow mediaserver mnt_user_file:dir { search };
allow mediaserver storage_file:lnk_file { read };
allow mediaserver storage_file:dir { search };
allow mediaserver log_device:chr_file { open write };