1# Policy for /system/bin/time_daemon 2type time, domain; 3type time_exec, exec_type, vendor_file_type, file_type; 4 5init_daemon_domain(time) 6 7allow time self:capability { setgid setuid sys_time }; 8 9allow time self:socket create_socket_perms; 10allowxperm time self:socket ioctl msm_sock_ipc_ioctls; 11 12# /sys/bus/msm_subsys 13allow time sysfs:dir r_dir_perms; 14r_dir_file(time, sysfs_msm_subsys) 15 16allow time sysfs_soc:dir search; 17allow time sysfs_soc:file r_file_perms; 18 19typeattribute time data_between_core_and_vendor_violators; 20allow time time_data_file:file create_file_perms; 21allow time time_data_file:dir rw_dir_perms; 22 23allow time rtc_device:chr_file r_file_perms; 24 25# Set sys.time.set property 26set_prop(time, sys_time_prop) 27 28userdebug_or_eng(` 29 allow time diag_device:chr_file rw_file_perms; 30') 31dontaudit time diag_device:chr_file rw_file_perms; 32dontaudit time unlabeled:dir search; 33