Merge "Allow CAP_SYS_NICE for crosvm" into main

This commit is contained in:
David Dai 2024-02-05 22:20:13 +00:00 committed by Gerrit Code Review
commit 8a216be443

View file

@ -51,6 +51,9 @@ userdebug_or_eng(`
dontaudit crosvm self:capability ipc_lock;
')
# Allow crosvm to tune for performance.
allow crosvm self:global_capability_class_set sys_nice;
# Let crosvm access its control socket as created by VS.
# read, write, getattr: listener socket polling
# accept: listener socket accepting new connection