diff --git a/file_contexts b/file_contexts
index fcb22e9e0..eef0fd395 100644
--- a/file_contexts
+++ b/file_contexts
@@ -175,6 +175,7 @@
 /system/bin/patchoat    u:object_r:dex2oat_exec:s0
 /system/bin/sgdisk      u:object_r:sgdisk_exec:s0
 /system/bin/blkid       u:object_r:blkid_exec:s0
+/system/bin/tzdatacheck u:object_r:tzdatacheck_exec:s0
 
 #############################
 # Vendor files
diff --git a/tzdatacheck.te b/tzdatacheck.te
new file mode 100644
index 000000000..a95dc0d2a
--- /dev/null
+++ b/tzdatacheck.te
@@ -0,0 +1,8 @@
+# The tzdatacheck command run by init.
+type tzdatacheck, domain;
+type tzdatacheck_exec, exec_type, file_type;
+
+init_daemon_domain(tzdatacheck)
+
+allow tzdatacheck zoneinfo_data_file:dir create_dir_perms;
+allow tzdatacheck zoneinfo_data_file:file unlink;