# Access devices. allow system_server dvb_device:chr_file rw_file_perms; allow system_server uhid_device:chr_file { write open ioctl };