| # watchdogd seclabel is specified in init.<board>.rc | |
| type watchdogd, domain; | |
| allow watchdogd rootfs:file { entrypoint r_file_perms }; | |
| allow watchdogd self:capability mknod; | |
| allow watchdogd device:dir { add_name write remove_name }; | |
| allow watchdogd watchdog_device:chr_file rw_file_perms; | |
| # because of /dev/__kmsg__ and /dev/__null__ | |
| allow watchdogd device:chr_file create_file_perms; |