commit 1ba185cd4eb1db56d50019da1e6b0ba1fc5d9cad
author Nick Kralevich <nnk@google.com> Mon Dec 16 11:59:32 2013 -0800
committer Nick Kralevich <nnk@google.com> Mon Dec 16 11:59:32 2013 -0800
tree 5204e5f82cebb344279084b2799fd4628182b855
parent c30f72454ae218ca97df61448d80c024f2ec170c

allow time rw access to /dev/diag

Addresses the following denials:

6.535066   type=1400 audit(5886306.500:12): avc:  denied  { read write } for  pid=205 comm="time_daemon" name="diag" dev="tmpfs" ino=6078 scontext=u:r:time:s0 tcontext=u:object_r:diag_device:s0 tclass=chr_file
6.535245   type=1400 audit(5886306.500:13): avc:  denied  { open } for  pid=205 comm="time_daemon" name="diag" dev="tmpfs" ino=6078 scontext=u:r:time:s0 tcontext=u:object_r:diag_device:s0 tclass=chr_file

Change-Id: I7a6bfb1733b9f9898cd987207576c1e15ea65965

sepolicy/time.te

diff --git a/sepolicy/time.te b/sepolicy/time.te
index a1522c8..1881e14 100644
--- a/sepolicy/time.te
+++ b/sepolicy/time.te
@@ -9,6 +9,7 @@
 
 allow time time_data_file:dir rw_dir_perms;
 allow time time_data_file:file create_file_perms;
+allow time diag_device:chr_file rw_file_perms;
 
 allow time shared_log_device:chr_file rw_file_perms;
 allow time alarm_device:chr_file rw_file_perms;