From e647578502e439dd1a980e5923fe26e602865e1b Mon Sep 17 00:00:00 2001
From: Neil Fuller <nfuller@google.com>
Date: Tue, 7 Apr 2015 13:35:21 +0100
Subject: [PATCH] Add rules for /system/bin/tzdatacheck

Bug: 19941636
Change-Id: I7cc61e058424c856da88f11ff9b259f34cb39dc7
---
 file_contexts  | 1 +
 tzdatacheck.te | 8 ++++++++
 2 files changed, 9 insertions(+)
 create mode 100644 tzdatacheck.te

diff --git a/file_contexts b/file_contexts
index fcb22e9e0..eef0fd395 100644
--- a/file_contexts
+++ b/file_contexts
@@ -175,6 +175,7 @@
 /system/bin/patchoat    u:object_r:dex2oat_exec:s0
 /system/bin/sgdisk      u:object_r:sgdisk_exec:s0
 /system/bin/blkid       u:object_r:blkid_exec:s0
+/system/bin/tzdatacheck u:object_r:tzdatacheck_exec:s0
 
 #############################
 # Vendor files
diff --git a/tzdatacheck.te b/tzdatacheck.te
new file mode 100644
index 000000000..a95dc0d2a
--- /dev/null
+++ b/tzdatacheck.te
@@ -0,0 +1,8 @@
+# The tzdatacheck command run by init.
+type tzdatacheck, domain;
+type tzdatacheck_exec, exec_type, file_type;
+
+init_daemon_domain(tzdatacheck)
+
+allow tzdatacheck zoneinfo_data_file:dir create_dir_perms;
+allow tzdatacheck zoneinfo_data_file:file unlink;