1 allow system_app time_daemon:unix_stream_socket connectto; 2 allow system_app atfwd_service:service_manager add; 3 unix_socket_connect(system_app, cnd, cnd) 4 5 allow system_app cne_service:service_manager add; 6 7 # allow CNEService to write /data/connectivity 8 allow system_app cnd_data_file:dir w_dir_perms; 9 # allow CNEService to create profile.txt 10 allow system_app cnd_data_file:file create_file_perms; 11