1allow mediaserver sysfs_soc:dir search;
2allow mediaserver sysfs_soc:file r_file_perms;
3# Only allow gpu ioctl commands that have been demonstrated to be necessary.
4allowxperm mediaserver gpu_device:chr_file
5 ioctl { gpu_ioctls unpriv_tty_ioctls };
6