1# watchdogd seclabel is specified in init.<board>.rc 2type watchdogd, domain; 3allow watchdogd self:capability mknod; 4allow watchdogd device:dir { add_name write remove_name }; 5allow watchdogd watchdog_device:chr_file rw_file_perms; 6# because of /dev/__kmsg__ and /dev/__null__ 7write_klog(watchdogd) 8type_transition watchdogd device:chr_file null_device "__null__"; 9allow watchdogd null_device:chr_file { create unlink }; 10