| # tlsdated. | |
| type tlsdated, domain; | |
| type tlsdated_exec, exec_type, file_type; | |
| type tlsdated_data_file, file_type, data_file_type; | |
| brillo_domain(tlsdated) | |
| net_domain(tlsdated) | |
| # Allow crash_reporter access to core dump files. | |
| allow_crash_reporter(tlsdated) | |
| allow tlsdated self:capability { sys_time setuid setgid }; | |
| allow tlsdated tlsdated_exec:file rx_file_perms; | |
| allow tlsdated tlsdated_data_file:dir w_dir_perms; | |
| allow tlsdated tlsdated_data_file:file create_file_perms; | |
| allow tlsdated system_file:dir getattr; |