diff --git a/aoc/sepolicy/aocxd.te b/aoc/sepolicy/aocxd.te
index bd9396f..bcfcd7b 100644
--- a/aoc/sepolicy/aocxd.te
+++ b/aoc/sepolicy/aocxd.te
@@ -23,3 +23,6 @@
 
 # add aocx service to the domain
 add_service(aocxd, aocx);
+
+# allow managing thread priority
+allow aocxd self:global_capability_class_set sys_nice;