Allow dovecot_auth to changes the sched algorythm

diff --git a/policy/modules/services/dovecot.te b/policy/modules/services/dovecot.te
index 87949e87356f639ef2191d23bed22d9d3a8ef9b2..2fbb8694a2590e69593a16c789362e0ae8e81e9a 100644 (file)
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@@ -196,8 +196,8 @@ optional_policy(`
 # dovecot auth local policy
 #
 
-allow dovecot_auth_t self:capability { chown dac_override ipc_lock setgid setuid };
-allow dovecot_auth_t self:process { signal_perms getcap setcap };
+allow dovecot_auth_t self:capability { chown dac_override ipc_lock setgid setuid sys_nice };
+allow dovecot_auth_t self:process { getsched setsched signal_perms getcap setcap };
 allow dovecot_auth_t self:fifo_file rw_fifo_file_perms;
 allow dovecot_auth_t self:unix_dgram_socket create_socket_perms;
 allow dovecot_auth_t self:unix_stream_socket create_stream_socket_perms;