allow mediaserver system_file:file execmod;
allow mediaserver mfc_device:chr_file rw_file_perms;