get_prop(time_daemon, diag_prop); allow time_daemon persist_file:file { open read write }; allow time_daemon sysfs:file { open read }; allow time_daemon time_daemon:capability { dac_override dac_read_search };