From 8f40b41e1081ee16e93e206a6b9f8d633655a99f Mon Sep 17 00:00:00 2001
From: Ruchi Kandoi <kandoiruchi@google.com>
Date: Wed, 1 Jun 2016 19:34:35 -0700
Subject: [PATCH] sepolicy: Add cap_sys_nice to surfaceflinger
bug 24503801
Change-Id: I6cf1afb3982c4da4f5e57188d3e24ac01c4bd416
---
surfaceflinger.te | 3 +++
1 file changed, 3 insertions(+)
diff --git a/surfaceflinger.te b/surfaceflinger.te
index 38f1dad83..7364e5fa1 100644
--- a/surfaceflinger.te
+++ b/surfaceflinger.te
@@ -60,6 +60,9 @@ allow surfaceflinger gpu_service:service_manager { add find };
allow surfaceflinger surfaceflinger_service:service_manager { add find };
allow surfaceflinger window_service:service_manager find;
+# allow self to set SCHED_FIFO
+allow surfaceflinger self:capability sys_nice;
+
###
### Neverallow rules
###
--
GitLab