allow perfd sysfs_devices_system_iosched:file rw_file_perms;
# read mediaserver status
allow perfd mediaserver:file { read open };