From 0d76f4e5c2efba89ad5e714cf6a86e2f50fd84e4 Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Tue, 10 Jan 2012 13:21:28 -0500
Subject: [PATCH] Allow system server to set scheduling info for apps.

---
 system.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/system.te b/system.te
index 970aed8f4..cba07e326 100644
--- a/system.te
+++ b/system.te
@@ -50,6 +50,9 @@ allow system self:netlink_kobject_uevent_socket *;
 # Kill apps.
 allow system appdomain:process { sigkill signal };
 
+# Set scheduling info for apps.
+allow system appdomain:process setsched;
+
 # Read /proc data for apps.
 allow system appdomain:dir r_dir_perms;
 allow system appdomain:{ file lnk_file } rw_file_perms;