type timeservice_app, domain; app_domain(timeservice_app); allow timeservice_app app_api_service:service_manager find; allow timeservice_app time_daemon:unix_stream_socket connectto;