From d202a34dbc49ae878079d714b3260c0be6f1f6e4 Mon Sep 17 00:00:00 2001
From: Bruce Po <brucepo@google.com>
Date: Fri, 12 Jan 2024 19:28:00 +0000
Subject: [PATCH] Allow aocxd to set thread priority

aocxd sets thread scheduler to SCHED_FIFO. This is so audio processing
in aocxd can run without glitching.

vndbinder:11464: type=1400 audit(0.0:17): avc:  denied  { sys_nice } for  capability=23  scontext=u:r:aocxd:s0 tcontext=u:r:aocxd:s0 tclass=capability permissive=0

BUG: 318791959
Change-Id: I9c9148aa7b18ce525091f93956e112b4c178a129
---
 aoc/sepolicy/aocxd.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/aoc/sepolicy/aocxd.te b/aoc/sepolicy/aocxd.te
index bd9396f..bcfcd7b 100644
--- a/aoc/sepolicy/aocxd.te
+++ b/aoc/sepolicy/aocxd.te
@@ -23,3 +23,6 @@ wakelock_use(aocxd);
 
 # add aocx service to the domain
 add_service(aocxd, aocx);
+
+# allow managing thread priority
+allow aocxd self:global_capability_class_set sys_nice;