allow time_daemon property_socket:sock_file write; get_prop(time_daemon, diag_prop); allow time_daemon diag_device:chr_file { read write }; allow time_daemon diag_device:chr_file open; allow time_daemon diag_device:chr_file ioctl;