r_dir_file(netd, efs_file) r_dir_file(netd, firmware_file) allow netd firmware_file:dir r_dir_perms; allow netd firmware_file:file r_file_perms; allow netd unlabeled:file { open read }; allow netd system_data_file:file { open };