allow priv_app device:dir open;
allow priv_app proc_interrupts:file open;
allow priv_app proc_modules:file { getattr open read };
allow priv_app proc_stat:file { getattr open read };