Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a00a0851 authored by San Mehat's avatar San Mehat
Browse files

runtime: Add CAP_SYS_NICE to the system server capabilities list so it 


can (eventually) move arbitrary threads into different cgroups

Signed-off-by: default avatarSan Mehat <san@google.com>
parent 1c4b60c2

cmds/runtime/main_runtime.cpp

+2 −2
Original line number Original line Diff line number Diff line
@@ -45,9 +45,9 @@ static const char* ZYGOTE_ARGV[] = { 
    "--setgroups=1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,3001,3002,3003",

    "--setgroups=1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,3001,3002,3003",

    /* CAP_SYS_TTY_CONFIG & CAP_SYS_RESOURCE & CAP_NET_BROADCAST &

    /* CAP_SYS_TTY_CONFIG & CAP_SYS_RESOURCE & CAP_NET_BROADCAST &

     * CAP_NET_ADMIN & CAP_NET_RAW & CAP_NET_BIND_SERVICE  & CAP_KILL &

     * CAP_NET_ADMIN & CAP_NET_RAW & CAP_NET_BIND_SERVICE  & CAP_KILL &

     * CAP_SYS_BOOT

     * CAP_SYS_BOOT CAP_SYS_NICE

     */

     */

    "--capabilities=88161312,88161312",

    "--capabilities=96549920,96549920",

    "--runtime-init",

    "--runtime-init",

    "--nice-name=system_server",

    "--nice-name=system_server",

    "com.android.server.SystemServer"

    "com.android.server.SystemServer"