allow perfd sysfs_devices_system_iosched:file rw_file_perms;

# read mediaserver status
allow perfd mediaserver:file { read open };