Add the sys_resource capability to sdcardd.

Change-Id: I0b2ecdbddbed3d5ea1617c9ae9af7f8b1c9ace93

Add the sys_resource capability to sdcardd.
1ac712f7 · Geremy Condra · repo sync · 4387956f · 1ac712f7
Commit 1ac712f7 authored 12 years ago by Geremy Condra Committed by repo sync 12 years ago
--- a/sdcardd.te
+++ b/sdcardd.te
@@ -7,6 +7,6 @@ allow sdcardd cgroup:dir create_dir_perms;
 allow sdcardd fuse_device:chr_file rw_file_perms;
 allow sdcardd rootfs:dir mounton;
 allow sdcardd sdcard_type:filesystem mount;
-allow sdcardd self:capability { setuid setgid dac_override sys_admin };
+allow sdcardd self:capability { setuid setgid dac_override sys_admin sys_resource };
 allow sdcardd system_data_file:dir  create_dir_perms;
 allow sdcardd system_data_file:file create_file_perms;