allow ims sysfs:file { open read }; allow ims diag_device:chr_file { read };