Merge "Add the sys_resource capability to sdcardd." into jb-mr2-dev

404fc4fa · Geremy Condra · Android (Google) Code Review · 2c831009 · 1ac712f7 · 404fc4fa
Commit 404fc4fa authored 12 years ago by Geremy Condra Committed by Android (Google) Code Review 12 years ago
--- a/sdcardd.te
+++ b/sdcardd.te
@@ -7,6 +7,6 @@ allow sdcardd cgroup:dir create_dir_perms;
 allow sdcardd fuse_device:chr_file rw_file_perms;
 allow sdcardd rootfs:dir mounton;
 allow sdcardd sdcard_type:filesystem mount;
-allow sdcardd self:capability { setuid setgid dac_override sys_admin };
+allow sdcardd self:capability { setuid setgid dac_override sys_admin sys_resource };
 allow sdcardd system_data_file:dir  create_dir_perms;
 allow sdcardd system_data_file:file create_file_perms;