allow priv_app device:dir { open read getattr };
allow priv_app cache_private_backup_file:dir { getattr setattr };
allow vold cache_file:dir create;