allow uncrypt device:dir write; allow uncrypt kmsg_device:chr_file { open write };