| rpcraig | bac9992 | 2012-12-03 06:07:45 -0500 | [diff] [blame] | 1 | # watchdogd seclabel is specified in init.<board>.rc |
| 2 | type watchdogd, domain; |
| Stephen Smalley | 043b902 | 2013-10-29 14:42:41 -0400 | [diff] [blame] | 3 | allow watchdogd rootfs:file { entrypoint r_file_perms }; |
| 4 | allow watchdogd self:capability mknod; |
| 5 | allow watchdogd device:dir { add_name write remove_name }; |
| 6 | allow watchdogd watchdog_device:chr_file rw_file_perms; |
| 7 | # because of /dev/__kmsg__ and /dev/__null__ |
| 8 | write_klog(watchdogd) |
| 9 | type_transition watchdogd device:chr_file null_device "__null__"; |
| 10 | allow watchdogd null_device:chr_file { create unlink }; |