allow mediaextractor unlabeled:file { read };
allow mediaextractor oemfs:file {read};