#============= healthd ==============
allow healthd self:capability { dac_override dac_read_search };
allow healthd self:capability2 wake_alarm;