platform_system_sepolicy/public/tzdatacheck.te

# The tzdatacheck command run by init.
type tzdatacheck, domain, domain_deprecated;
type tzdatacheck_exec, exec_type, file_type;

allow tzdatacheck zoneinfo_data_file:dir create_dir_perms;
allow tzdatacheck zoneinfo_data_file:file unlink;
Add rules for /system/bin/tzdatacheck Bug: 19941636 Change-Id: I7cc61e058424c856da88f11ff9b259f34cb39dc7 2015-04-07 14:35:21 +02:00			`# The tzdatacheck command run by init.`
Create attribute for moving perms out of domain Motivation: Domain is overly permissive. Start removing permissions from domain and assign them to the domain_deprecated attribute. Domain_deprecated and domain can initially be assigned to all domains. The goal is to not assign domain_deprecated to new domains and to start removing domain_deprecated where it is not required or reassigning the appropriate permissions to the inheriting domain when necessary. Bug: 25433265 Change-Id: I8b11cb137df7bdd382629c98d916a73fe276413c 2015-11-03 18:54:39 +01:00			`type tzdatacheck, domain, domain_deprecated;`
Add rules for /system/bin/tzdatacheck Bug: 19941636 Change-Id: I7cc61e058424c856da88f11ff9b259f34cb39dc7 2015-04-07 14:35:21 +02:00			`type tzdatacheck_exec, exec_type, file_type;`

			`allow tzdatacheck zoneinfo_data_file:dir create_dir_perms;`
			`allow tzdatacheck zoneinfo_data_file:file unlink;`