1allow mediaserver vendor_data_file:file { read getattr }; 2allow mediaserver vendor_data_file:lnk_file read; 3dontaudit mediaserver vendor_data_file:file { open }; 4