allow toolbox system_data_file:file setattr; allow toolbox shell_exec:file rx_file_perms; allow toolbox toolbox_exec:file execute_no_trans; allow toolbox self:capability { dac_override chown fowner fsetid };