| type time, domain, device_domain_deprecated; |
| type time_exec, exec_type, file_type; |
| |
| # Started by init |
| init_daemon_domain(time) |
| |
| allow time shared_log_device:chr_file rw_file_perms; |
| allow time alarm_device:chr_file rw_file_perms; |
| |
| # Is r_file_perms sufficient for /dev/rtc0 ? |
| allow time rtc_device:chr_file r_file_perms; |
| |
| allow time time_data_file:dir rw_dir_perms; |
| allow time time_data_file:file create_file_perms; |
| |
| allow time self:socket *; |
| allowxperm time self:socket ioctl msm_sock_ipc_ioctls; |
| allow time self:capability { setuid setgid }; |
