allow isolated_app app_data_file:file setattr; dontaudit isolated_app content_capture_service:service_manager find;