1 type time, domain, domain_deprecated; 2 type time_exec, exec_type, file_type; 3 4 # Started by init 5 init_daemon_domain(time) 6 7 allow time self:capability { setuid setgid }; 8 9 10 allow time rtc_device:chr_file r_file_perms; 11 allow time alarm_device:chr_file rw_file_perms; 12 13 allow time time_data_file:dir rw_dir_perms; 14 allow time time_data_file:file create_file_perms; 15 allow time sysfs_msm_subsys:dir r_dir_perms; 16 allow time sysfs_msm_subsys:lnk_file r_file_perms; 17 18 allow time self:socket create_socket_perms; 19 20 userdebug_or_eng(` 21 allow time shared_log_device:chr_file rw_file_perms; 22 ') 23