allow uwb hal sys_nice access

hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { sys_nice } for capability=23 scontext=u:r:hal_uwb_default:s0 tcontext=u:r:hal_uwb_default:s0 tclass=capability permissive=0
hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { setsched } for scontext=u:r:hal_uwb_default:s0 tcontext=u:r:kernel:s0 tclass=process permissive=0

Bug: 196438549
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I742bae701cfcc7b4842cd63abbc8c275d82c8ba1
This commit is contained in:
Victor Liu 2021-08-12 14:53:10 -07:00
parent 0c429efc07
commit 39b5815a1e

View file

@ -15,5 +15,8 @@ allow uwb_vendor_app radio_service:service_manager find;
allow uwb_vendor_app uwb_vendor_data_file:file create_file_perms;
allow uwb_vendor_app uwb_vendor_data_file:dir create_dir_perms;
allow hal_uwb_default self:global_capability_class_set { sys_nice };
allow hal_uwb_default kernel:process { setsched };
binder_call(uwb_vendor_app, hal_uwb_default)
')