diff --git a/file_contexts b/file_contexts
index fcb22e9e0c9b73ce44a488b85348a1840ff9fcd1..eef0fd3955c1017a2ef79bd3b71d8f2e1ad42de1 100644
--- a/file_contexts
+++ b/file_contexts
@@ -175,6 +175,7 @@
 /system/bin/patchoat    u:object_r:dex2oat_exec:s0
 /system/bin/sgdisk      u:object_r:sgdisk_exec:s0
 /system/bin/blkid       u:object_r:blkid_exec:s0
+/system/bin/tzdatacheck u:object_r:tzdatacheck_exec:s0
 
 #############################
 # Vendor files
diff --git a/tzdatacheck.te b/tzdatacheck.te
new file mode 100644
index 0000000000000000000000000000000000000000..a95dc0d2a3f5f0f52a4d7ca8eb739e838e4503b1
--- /dev/null
+++ b/tzdatacheck.te
@@ -0,0 +1,8 @@
+# The tzdatacheck command run by init.
+type tzdatacheck, domain;
+type tzdatacheck_exec, exec_type, file_type;
+
+init_daemon_domain(tzdatacheck)
+
+allow tzdatacheck zoneinfo_data_file:dir create_dir_perms;
+allow tzdatacheck zoneinfo_data_file:file unlink;