allow fsck efs_block_device:blk_file rw_file_perms; allow fsck block_device:blk_file { ioctl }; allow fsck cache_file:dir getattr; allow fsck persist_file:dir getattr; allow fsck efs_file:dir getattr; allow fsck e2fsck_device:blk_file { open read write };