allow hvdcp sysfs:file { open read };
allow hvdcp sysfs:dir write;
allow hvdcp self:capability dac_override;