allow domain log_device:chr_file { open write };
allow domain log_device:dir { search };
allow { shell debuggerd } log_device:chr_file { read };