allow tee tmpfs:dir r_dir_perms;
allow tee persist_file:lnk_file read;