allow vold persist_file:dir { ioctl open read };
allow vold system_data_file:file { open };