2017-09-20 11:54:48 +00:00
|
|
|
type timekeep, domain;
|
2018-01-09 22:31:38 +00:00
|
|
|
type timekeep_exec, exec_type, vendor_file_type, file_type;
|
2017-01-23 12:09:08 +00:00
|
|
|
|
|
|
|
|
init_daemon_domain(timekeep)
|
|
|
|
|
|
2018-01-10 21:17:01 +00:00
|
|
|
# Grant permission to set system time and to set the real-time lock
|
|
|
|
|
allow timekeep self:capability { fowner sys_time };
|
2017-01-23 12:09:08 +00:00
|
|
|
|
|
|
|
|
allow timekeep time_data_file:file create_file_perms;
|
|
|
|
|
allow timekeep time_data_file:dir create_dir_perms;
|
|
|
|
|
|
2019-01-19 11:52:51 +00:00
|
|
|
allow timekeep sysfs:file r_file_perms;
|
|
|
|
|
|
2019-01-17 17:29:15 +00:00
|
|
|
allow timekeep sysfs_rtc:dir search;
|
|
|
|
|
allow timekeep sysfs_rtc:file r_file_perms;
|
2017-12-20 12:29:09 +00:00
|
|
|
|
2017-01-23 12:09:08 +00:00
|
|
|
set_prop(timekeep, timekeep_prop)
|
