diff --git a/lmkd.te b/lmkd.te index 8c2b12c7b1b4e868fee0ebf9e0d58a2279e9fef3..b1ffca41aa410e76e88cfbd5b8c358b4b78ba62d 100644 --- a/lmkd.te +++ b/lmkd.te @@ -18,3 +18,9 @@ allow lmkd sysfs_lowmemorykiller:file w_file_perms; # Send kill signals allow lmkd appdomain:process sigkill; + +# Clean up old cgroups +allow lmkd cgroup:dir { remove_name rmdir }; + +# Set self to SCHED_FIFO +allow lmkd self:capability sys_nice;