allow shared_relro log_device:chr_file { write };