Allow aocxd to set thread priority
aocxd sets thread scheduler to SCHED_FIFO. This is so audio processing
in aocxd can run without glitching.
vndbinder:11464: type=1400 audit(0.0:17): avc: denied { sys_nice } for capability=23 scontext=u:r:aocxd:s0 tcontext=u:r:aocxd:s0 tclass=capability permissive=0
BUG: 318791959
Change-Id: I9c9148aa7b18ce525091f93956e112b4c178a129
diff --git a/aoc/sepolicy/aocxd.te b/aoc/sepolicy/aocxd.te
index bd9396f..bcfcd7b 100644
--- a/aoc/sepolicy/aocxd.te
+++ b/aoc/sepolicy/aocxd.te
@@ -23,3 +23,6 @@
# add aocx service to the domain
add_service(aocxd, aocx);
+
+# allow managing thread priority
+allow aocxd self:global_capability_class_set sys_nice;