set_prop(mediaserver, system_prop) allow mediaserver cedar_device:chr_file rw_file_perms; allow mediaserver vendor_file:file { r_file_perms execute }; allow mediaserver cameraserver:dir search; allow mediaserver cameraserver:file r_file_perms; allow mediaserver untrusted_app:dir search; allow mediaserver untrusted_app:file { read open }; allow mediaserver untrusted_app_25:dir search; allow mediaserver untrusted_app_25:file { read open }; allow mediaserver system_app_data_file:file { read getattr write }; allow mediaserver unlabeled:file { read getattr };