allow { bt_firmware_file firmware_file } rootfs:filesystem associate;