commit 511252e73e7c7247f9676dcbd2466997f75cf814
author Robert Craig <rpcraig@tycho.ncsc.mil> Mon May 05 10:39:15 2014 -0400
committer Robert Craig <rpcraig@tycho.ncsc.mil> Mon May 05 10:39:15 2014 -0400
tree 64b59211ebc8a3696682d269a7fdbfff5e38c5b9
parent e2b3047b6752953e0f9dd29a0c95e7ea1225cc16

SELinux: Allow mpdecision to set its scheduling priority.

This helps address the following denial.

avc:  denied  { sys_nice } for  pid=156 comm="mpdecision" capability=23  scontext=u:r:mpdecision:s0 tcontext=u:r:mpdecision:s0 tclass=capability

Change-Id: I63a6eda630bcb0274a433cc6cfb468e16088bdb6
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

sepolicy/mpdecision.te

diff --git a/sepolicy/mpdecision.te b/sepolicy/mpdecision.te
index c31c296..c4455da 100644
--- a/sepolicy/mpdecision.te
+++ b/sepolicy/mpdecision.te
@@ -38,3 +38,5 @@
 # /proc/PID/status file.
 r_dir_file(mpdecision, system_server)
 r_dir_file(mpdecision, mediaserver)
+
+allow mpdecision self:capability sys_nice;