android_device_samsung_msm8.../sepolicy/timekeep.te
LuK1337 6cc79a1df7 msm8976-common: sepolicy: Allow timekeep to read "since_epoch"
* We don't really need to relabel it since we trust
  timekeep as it's just a simple OSS program.
2018-01-26 15:47:21 +01:00

21 lines
405 B
Plaintext

type timekeep, domain;
type timekeep_exec, exec_type, file_type;
# Started by init
init_daemon_domain(timekeep)
allow timekeep self:capability {
fowner
fsetid
sys_time
dac_override
dac_read_search
};
allow timekeep time_data_file:file create_file_perms;
allow timekeep time_data_file:dir create_dir_perms;
allow timekeep sysfs:file r_file_perms;
set_prop(timekeep, timekeep_prop)