Merge "surfaceflinger: allow to be profiled by perfetto on release builds" am: b1f61ba51b am: c5132412d4 am: 8c02fcaf53

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2060049

Change-Id: I4caf1472571c983964035bf4f22500f568543d25
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/private/surfaceflinger.te b/private/surfaceflinger.te
index bc7543b..5223b50 100644
--- a/private/surfaceflinger.te
+++ b/private/surfaceflinger.te
@@ -72,9 +72,13 @@
   allow surfaceflinger wm_trace_data_file:file { getattr setattr create w_file_perms };
 ')
 
-# Needed to register as a Perfetto producer.
+# Allow userspace tracing via perfetto.
 perfetto_producer(surfaceflinger)
 
+# Allow to be profiled by performance tools.
+can_profile_heap(surfaceflinger)
+can_profile_perf(surfaceflinger)
+
 # Use socket supplied by adbd, for cmd gpu vkjson etc.
 allow surfaceflinger adbd:unix_stream_socket { read write getattr };