allow ueventd metadata_file:dir search; allow ueventd keymaster_device:chr_file { rw_file_perms create setattr }; allow ueventd gatekeeper_device:chr_file { rw_file_perms create setattr };