From 1ac712f74c11bd146deb61b531b4d69e9178cbc7 Mon Sep 17 00:00:00 2001
From: Geremy Condra <gcondra@google.com>
Date: Wed, 27 Mar 2013 21:14:31 -0700
Subject: [PATCH] Add the sys_resource capability to sdcardd.

Change-Id: I0b2ecdbddbed3d5ea1617c9ae9af7f8b1c9ace93
---
 sdcardd.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sdcardd.te b/sdcardd.te
index 4445183a0..c79854508 100644
--- a/sdcardd.te
+++ b/sdcardd.te
@@ -7,6 +7,6 @@ allow sdcardd cgroup:dir create_dir_perms;
 allow sdcardd fuse_device:chr_file rw_file_perms;
 allow sdcardd rootfs:dir mounton;
 allow sdcardd sdcard_type:filesystem mount;
-allow sdcardd self:capability { setuid setgid dac_override sys_admin };
+allow sdcardd self:capability { setuid setgid dac_override sys_admin sys_resource };
 allow sdcardd system_data_file:dir  create_dir_perms;
 allow sdcardd system_data_file:file create_file_perms;
-- 
GitLab