sepolicy/zygote.te

# ps command may do this
allow untrusted_app zygote:process getsched;