sepolicy/time.te

type time, domain;
type time_exec, exec_type, file_type;

# Started by init
init_daemon_domain(time)

permissive time;

allow time self:capability { setuid setgid };

allow time shared_log_device:chr_file rw_file_perms;
allow time rtc_device:chr_file r_file_perms;
allow time alarm_device:chr_file rw_file_perms;

allow time time_data_file:file r_file_perms;
allow time sysfs_msm_subsys:dir r_dir_perms;
allow time sysfs_msm_subsys:lnk_file r_file_perms;

allow time self:socket create_socket_perms;