type time, domain, domain_deprecated;
type time_exec, exec_type, file_type;

# Started by init
init_daemon_domain(time)

allow time shared_log_device:chr_file rw_file_perms;
allow time alarm_device:chr_file rw_file_perms;

# Is r_file_perms sufficient for /dev/rtc0 ?
allow time rtc_device:chr_file r_file_perms;

allow time time_data_file:dir rw_dir_perms;
allow time time_data_file:file create_file_perms;

allow time self:socket *;
allow time self:capability { setuid setgid };