diff --git a/policy/modules/system/clock.if b/policy/modules/system/clock.if index e2f6d9328..2734f4337 100644 --- a/policy/modules/system/clock.if +++ b/policy/modules/system/clock.if @@ -80,6 +80,25 @@ interface(`clock_dontaudit_write_adjtime',` dontaudit $1 adjtime_t:file write; ') +######################################## +## +## Read clock drift adjustments. +## +## +## +## Domain allowed access. +## +## +# +interface(`clock_read_adjtime',` + gen_require(` + type adjtime_t; + ') + + files_list_etc($1) + allow $1 adjtime_t:file read_file_perms; +') + ######################################## ## ## Read and write clock drift adjustments.