virsh needs to setsched

diff --git a/policy/modules/services/virt.te b/policy/modules/services/virt.te
index a8367793fd662b7f8d0b5f60b67bd684d88c994b..e137a51c9cce6fdb8897bf48277e26f30f80ead5 100644 (file)
--- a/policy/modules/services/virt.te
+++ b/policy/modules/services/virt.te
@@ -609,7 +609,7 @@ init_system_domain(virsh_t, virsh_exec_t)
 typealias virsh_t alias xm_t;
 typealias virsh_exec_t alias xm_exec_t;
 
-allow virsh_t self:capability { setpcap dac_override ipc_lock sys_tty_config };
+allow virsh_t self:capability { setpcap setsched dac_override ipc_lock sys_tty_config };
 allow virsh_t self:process { getcap getsched setcap signal };
 allow virsh_t self:fifo_file rw_fifo_file_perms;
 allow virsh_t self:unix_stream_socket { create_stream_socket_perms connectto };