android_device_samsung_msm8.../sepolicy/timekeep.te

type timekeep, domain;
type timekeep_exec, exec_type, file_type;

# Started by init
init_daemon_domain(timekeep)

allow timekeep self:capability {
    fowner
    fsetid
    sys_time
    dac_override
    dac_read_search
};

allow timekeep time_data_file:file create_file_perms;
allow timekeep time_data_file:dir create_dir_perms;

allow timekeep sysfs:file r_file_perms;

set_prop(timekeep, timekeep_prop)
msm8976-common: Initial SELinux updates * Drop domain_deprecated * Use proper device block paths as symlinks are no longer working. 2017-09-20 11:54:48 +00:00			`type timekeep, domain;`
msm8976-common: Switch to TimeKeep 2017-01-23 12:09:08 +00:00			`type timekeep_exec, exec_type, file_type;`

			`# Started by init`
			`init_daemon_domain(timekeep)`

			`allow timekeep self:capability {`
			`fowner`
			`fsetid`
			`sys_time`
			`dac_override`
			`dac_read_search`
			`};`

			`allow timekeep time_data_file:file create_file_perms;`
			`allow timekeep time_data_file:dir create_dir_perms;`

msm8976-common: sepolicy: Allow timekeep to read "since_epoch" * We don't really need to relabel it since we trust timekeep as it's just a simple OSS program. 2017-12-20 12:29:09 +00:00			`allow timekeep sysfs:file r_file_perms;`

msm8976-common: Switch to TimeKeep 2017-01-23 12:09:08 +00:00			`set_prop(timekeep, timekeep_prop)`