allow hal_camera_default sysfs:file read; allow hal_camera_default sdcardfs:dir { search }; allow hal_camera_default sdcardfs:file { rw_file_perms }; allow hal_camera_default mnt_vendor_file:dir { add_name write }; allow hal_camera_default mnt_vendor_file:file { create getattr open read write };