allow untrusted_app graphics_device:dir rw_dir_perms;
allow untrusted_app graphics_device:file rw_file_perms;
allow untrusted_app sdcard_external:dir rw_dir_perms;
allow untrusted_app sdcard_external:file rw_file_perms;
allow untrusted_app vfat:dir { rw_file_perms create setattr rename };
allow untrusted_app vfat:file { rw_file_perms create setattr rename };
allow untrusted_app mnt_media_rw_file:dir { search read open };