Merge "allow system_app domain to be profiled" am: 295d74b9e0 am: df6fd2bab6 am: 559856e579

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2055465

Change-Id: I91c5ec391a8c853e989be17ac98ee8108e432108
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/private/system_app.te b/private/system_app.te
index 77cca3d..01956f4 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -176,6 +176,10 @@
 # Allow system apps to act as Perfetto producers.
 perfetto_producer(system_app)
 
+# TODO(b/217368496): remove this.
+can_profile_heap(system_app)
+can_profile_perf(system_app)
+
 ###
 ### Neverallow rules
 ###