sdm660-common: sepolicy: allow hal_power_default sys_admin capability

This commit is contained in:
pix106 2022-10-11 09:24:15 +02:00
parent e279964f3c
commit 9572ebacd7
2 changed files with 1 additions and 2 deletions

View file

@ -7,7 +7,6 @@ dontaudit blkid_untrusted self:capability sys_admin;
dontaudit crash_dump self:capability sys_admin;
dontaudit extra_free_kbytes self:capability sys_admin;
dontaudit fsck self:capability sys_admin;
dontaudit hal_power_default self:capability sys_admin;
dontaudit hal_wifi_supplicant_default self:capability sys_admin;
dontaudit installd self:capability kill;
dontaudit irsc_util self:capability sys_admin;

View file

@ -18,7 +18,7 @@ typeattribute hal_power_default mlstrustedsubject;
# Set scheduling info for apps (for adpf)
allow hal_power_default appdomain:process { getsched setsched };
allow hal_power_default self:capability sys_nice;
allow hal_power_default self:capability { sys_nice sys_admin };
# Set scheduling info for system_server (for adpf)
allow hal_power_default system_server:process setsched;