allow insmod-sh self:capability sys_nice;
allow insmod-sh kernel:process setsched;