Merge "Grant CAP_SYS_NICE to processes that need it." into oc-dev

public/hal_bluetooth.te

@@ -25,3 +25,6 @@ set_prop(hal_bluetooth, bluetooth_prop)
 
 # /proc access (bluesleep etc.).
 allow hal_bluetooth proc_bluetooth_writable:file rw_file_perms;
+
+# allow to run with real-time scheduling policy
+allow hal_bluetooth self:capability sys_nice;

public/hal_graphics_allocator.te

@@ -8,3 +8,6 @@ allow hal_graphics_allocator_client hal_graphics_mapper_hwservice:hwservice_mana
 # GPU device access
 allow hal_graphics_allocator gpu_device:chr_file rw_file_perms;
 allow hal_graphics_allocator ion_device:chr_file r_file_perms;
+
+# allow to run with real-time scheduling policy
+allow hal_graphics_allocator self:capability sys_nice;

public/hal_sensors.te

@@ -10,3 +10,6 @@ allow hal_sensors { appdomain -isolated_app }:fd use;
 # Allow sensor hals to access ashmem memory allocated by android.hidl.allocator
 # fd is passed in from framework sensorservice HAL.
 allow hal_sensors hal_allocator:fd use;
+
+# allow to run with real-time scheduling policy
+allow hal_sensors self:capability sys_nice;