diff --git a/sepolicy/vendor/dontaudit.te b/sepolicy/vendor/dontaudit.te index a1952642..40fae31a 100644 --- a/sepolicy/vendor/dontaudit.te +++ b/sepolicy/vendor/dontaudit.te @@ -7,7 +7,6 @@ dontaudit blkid_untrusted self:capability sys_admin; dontaudit crash_dump self:capability sys_admin; dontaudit extra_free_kbytes self:capability sys_admin; dontaudit fsck self:capability sys_admin; -dontaudit hal_power_default self:capability sys_admin; dontaudit hal_wifi_supplicant_default self:capability sys_admin; dontaudit installd self:capability kill; dontaudit irsc_util self:capability sys_admin; diff --git a/sepolicy/vendor/hal_power_default.te b/sepolicy/vendor/hal_power_default.te index abef0a42..03d161b6 100644 --- a/sepolicy/vendor/hal_power_default.te +++ b/sepolicy/vendor/hal_power_default.te @@ -18,7 +18,7 @@ typeattribute hal_power_default mlstrustedsubject; # Set scheduling info for apps (for adpf) allow hal_power_default appdomain:process { getsched setsched }; -allow hal_power_default self:capability sys_nice; +allow hal_power_default self:capability { sys_nice sys_admin }; # Set scheduling info for system_server (for adpf) allow hal_power_default system_server:process setsched;