diff --git a/common/init.te b/common/init.te
index 6835232..9d82a94 100644
--- a/common/init.te
+++ b/common/init.te
@@ -19,3 +19,6 @@
 #allow it for most domain. Do not honor LD_PRELOAD
 #for lmkd
 allow init { domain -lmkd }:process noatsecure;
+
+# allow setting proc_dirt_ratio fron init.rc scripts
+allow init proc_dirty_ratio:file rw_file_perms;
diff --git a/common/perfd.te b/common/perfd.te
index c74ae58..2da9e0b 100644
--- a/common/perfd.te
+++ b/common/perfd.te
@@ -3,7 +3,7 @@
 
 init_daemon_domain(perfd)
 
-allow perfd self:capability { net_admin chown dac_override fsetid };
+allow perfd self:capability { net_admin chown dac_override fsetid kill };
 allow perfd {
     sysfs_devices_system_cpu
     sysfs_cpu_online