[selinux-policy: 117/3172] interfaces needed for clock

[Daniel J Walsh]

commit 44a43b680bd158e272a74f82ee4ff00398f75bc0
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu May 5 21:19:18 2005 +0000

    interfaces needed for clock

 refpolicy/policy/modules/kernel/devices.if |   25 +++++++++++++++++++++++++
 1 files changed, 25 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/kernel/devices.if b/refpolicy/policy/modules/kernel/devices.if
index b93c642..5a7713c 100644
--- a/refpolicy/policy/modules/kernel/devices.if
+++ b/refpolicy/policy/modules/kernel/devices.if
@@ -345,6 +345,31 @@ class chr_file { getattr read ioctl };
 
 ########################################
 #
+# devices_write_realtime_clock(domain)
+#
+define(`devices_write_realtime_clock',`
+requires_block_template(`$0'_depend)
+allow $1 device_t:dir { getattr read search };
+allow $1 clock_device_t:chr_file { setattr lock write append ioctl };
+')
+
+define(`devices_write_realtime_clock_depend',`
+type device_t, clock_device_t;
+class dir { getattr read search };
+class chr_file { setattr lock write append ioctl };
+')
+
+########################################
+#
+# devices_modify_realtime_clock(domain)
+#
+define(`devices_modify_realtime_clock',`
+devices_read_realtime_clock($1)
+devices_write_realtime_clock($1)
+')
+
+########################################
+#
 # devices_record_sound_input(domain)
 #
 define(`devices_record_sound_input',`