From 9572ebacd7d8f82e04daf485a63c28f0840e148f Mon Sep 17 00:00:00 2001 From: pix106 Date: Tue, 11 Oct 2022 09:24:15 +0200 Subject: [PATCH] sdm660-common: sepolicy: allow hal_power_default sys_admin capability --- sepolicy/vendor/dontaudit.te | 1 - sepolicy/vendor/hal_power_default.te | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/sepolicy/vendor/dontaudit.te b/sepolicy/vendor/dontaudit.te index a1952642..40fae31a 100644 --- a/sepolicy/vendor/dontaudit.te +++ b/sepolicy/vendor/dontaudit.te @@ -7,7 +7,6 @@ dontaudit blkid_untrusted self:capability sys_admin; dontaudit crash_dump self:capability sys_admin; dontaudit extra_free_kbytes self:capability sys_admin; dontaudit fsck self:capability sys_admin; -dontaudit hal_power_default self:capability sys_admin; dontaudit hal_wifi_supplicant_default self:capability sys_admin; dontaudit installd self:capability kill; dontaudit irsc_util self:capability sys_admin; diff --git a/sepolicy/vendor/hal_power_default.te b/sepolicy/vendor/hal_power_default.te index abef0a42..03d161b6 100644 --- a/sepolicy/vendor/hal_power_default.te +++ b/sepolicy/vendor/hal_power_default.te @@ -18,7 +18,7 @@ typeattribute hal_power_default mlstrustedsubject; # Set scheduling info for apps (for adpf) allow hal_power_default appdomain:process { getsched setsched }; -allow hal_power_default self:capability sys_nice; +allow hal_power_default self:capability { sys_nice sys_admin }; # Set scheduling info for system_server (for adpf) allow hal_power_default system_server:process setsched;