allow mediaprovider unlabeled:dir { getattr search read open};
allow mediaprovider unlabeled:file { getattr read open };
allow mediaprovider mnt_media_rw_file:dir { open read getattr };
rw_rockchip_graphic_device(mediaprovider)