Reland "runas/shell.te: remove {kernel} to perf_event_open"
This reverts commit 1b3cf9171a549200154dae5a6e5b3998efbcfa9d.
Also allow transferring from runas_app domain to simpleperf domain,
when executing /system/bin/simpleperf in run-as.
Bug: 390626125
Test: run CtsSimpleperfTestCases
Change-Id: I78aa529b3dafaeebc1531069d31c43992d659ba5
diff --git a/private/shell.te b/private/shell.te
index 2033f7e..3e45e1f 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -142,7 +142,7 @@
# Allow shell to call perf_event_open for profiling other shell processes, but
# not the whole system.
-allow shell self:perf_event { open read write kernel };
+allow shell self:perf_event { open read write };
# Allow shell to read microdroid vendor image
r_dir_file(shell, vendor_microdroid_file)