sdm660-common: sepolicy: allow hal_power_default sys_admin capability
This commit is contained in:
parent
e279964f3c
commit
9572ebacd7
2 changed files with 1 additions and 2 deletions
1
sepolicy/vendor/dontaudit.te
vendored
1
sepolicy/vendor/dontaudit.te
vendored
|
@ -7,7 +7,6 @@ dontaudit blkid_untrusted self:capability sys_admin;
|
|||
dontaudit crash_dump self:capability sys_admin;
|
||||
dontaudit extra_free_kbytes self:capability sys_admin;
|
||||
dontaudit fsck self:capability sys_admin;
|
||||
dontaudit hal_power_default self:capability sys_admin;
|
||||
dontaudit hal_wifi_supplicant_default self:capability sys_admin;
|
||||
dontaudit installd self:capability kill;
|
||||
dontaudit irsc_util self:capability sys_admin;
|
||||
|
|
2
sepolicy/vendor/hal_power_default.te
vendored
2
sepolicy/vendor/hal_power_default.te
vendored
|
@ -18,7 +18,7 @@ typeattribute hal_power_default mlstrustedsubject;
|
|||
|
||||
# Set scheduling info for apps (for adpf)
|
||||
allow hal_power_default appdomain:process { getsched setsched };
|
||||
allow hal_power_default self:capability sys_nice;
|
||||
allow hal_power_default self:capability { sys_nice sys_admin };
|
||||
|
||||
# Set scheduling info for system_server (for adpf)
|
||||
allow hal_power_default system_server:process setsched;
|
||||
|
|
Loading…
Reference in a new issue