allow mediaserver system_file:file execmod;
allow mediaserver graphics_device:chr_file { ioctl open read write };