commit a9d71b789e1ba34d5c46ab2cdbec8d6547967073
author David Dai <davidai@google.com> Thu Feb 01 15:12:26 2024 -0800
committer David Dai <davidai@google.com> Fri Feb 02 00:34:55 2024 +0000
tree 6611b39ba9527596a74225dd3ca97f79ddbcd1f4
parent eb78624063c52557f4d89b8ba0d40c25291573da

Grant CAP_SYS_NICE for virtmgr/crosvm

Grant CAP_SYS_NICE for virtmgr and crosvm through VFS
capabilities.

Bug: 322197421
Test: Booted device and processes and checked that the correct
capabilities are given.

Change-Id: Ia243a1e7f6a116bf7631b20861c646ca9327ed19
Signed-off-by: David Dai <davidai@google.com>

apex/canned_fs_config

diff --git a/apex/canned_fs_config b/apex/canned_fs_config
index 5afd9d6..a990901 100644
--- a/apex/canned_fs_config
+++ b/apex/canned_fs_config
@@ -1 +1,3 @@
 /bin/virtualizationservice 0 2000 0755 capabilities=0x1000001  # CAP_CHOWN, CAP_SYS_RESOURCE
+/bin/crosvm 0 3013 0755 capabilities=0x800000 # CAP_SYS_NICE
+/bin/virtmgr 0 3013 0755 capabilities=0x800000 # CAP_SYS_NICE