allow mediaserver credmgrd_socket:sock_file rw_file_perms; allow mediaserver credmgrd:unix_stream_socket connectto; allow mediaserver mm-qcamerad:unix_stream_socket connectto; allow mediaserver sensorservice_service:service_manager find; allow mediaserver sysfs_battery_supply:dir search; allow mediaserver sysfs_battery_supply:file r_file_perms; allow mediaserver sysfs_graphics:dir search; allow mediaserver sysfs_graphics:{ file lnk_file } rw_file_perms; allow mediaserver system_server:unix_stream_socket rw_socket_perms; hal_client_domain(mediaserver, hal_configstore)