# watchdogd seclabel is specified in init.<board>.rc type watchdogd, domain; allow watchdogd rootfs:file { entrypoint r_file_perms }; allow watchdogd self:capability mknod; allow watchdogd device:dir { add_name write remove_name }; allow watchdogd watchdog_device:chr_file rw_file_perms; # because of /dev/__kmsg__ and /dev/__null__ allow watchdogd device:chr_file create_file_perms;
