allow system_app time_daemon:unix_stream_socket connectto; allow system_app atfwd_service:service_manager add; unix_socket_connect(system_app, cnd, cnd) allow system_app cne_service:service_manager add; # allow CNEService to write /data/connectivity allow system_app cnd_data_file:dir w_dir_perms; # allow CNEService to create profile.txt allow system_app cnd_data_file:file create_file_perms;