diff --git a/vendor/vendor_init.te b/vendor/vendor_init.te index 4dcc237..e59752c 100644 --- a/vendor/vendor_init.te +++ b/vendor/vendor_init.te @@ -6,3 +6,9 @@ allow vendor_init tee_data_file:lnk_file read; # MM allow vendor_init proc_compaction_proactiveness:file w_file_perms; allow vendor_init proc_percpu_pagelist_high_fraction:file w_file_perms; + +# CPUSET system group +allow vendor_init init:process { getsched setsched }; +allow vendor_init kernel:process { getsched setsched }; +allow vendor_init ueventd:process { getsched setsched }; +allow vendor_init prng_seeder:process { getsched setsched };