Add sepolicy for profcollectd
This does not yet list all the required capabilities for profcollectd,
but it at least allows the service to start under permissive mode.
Bug: 79161490
Test: start profcollectd
Change-Id: I92c6192fa9b31840b2aba26f83a6dc9f9e835030
diff --git a/private/shell.te b/private/shell.te
index 2a2af0f..9758b36 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -143,3 +143,8 @@
# Allow to read graphics related properties.
get_prop(shell, graphics_config_prop)
+
+# Allow to issue control commands to profcollectd binder service.
+userdebug_or_eng(`
+ allow shell profcollectd:binder call;
+')