Sepolicy: Give system server fd rights to perfprofd
So that perfprofd can send larger packets to dropbox.
Follow-up of commit 3fa95acb1e3219652aa0f8d2a9269a9a785ef3b2.
Bug: 73175642
Test: m
Test: manual
Change-Id: I88d1f83962243589909ff1ce3d02195e7c494256
diff --git a/private/system_server.te b/private/system_server.te
index d1cb3e9..c126ca4 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -379,6 +379,12 @@
allow system_server perfetto_traces_data_file:file read;
allow system_server perfetto:fd use;
+# Allow dropbox to read /data/misc/perfprofd. Only the fd is sent over binder.
+userdebug_or_eng(`
+ allow system_server perfprofd_data_file:file read;
+ allow system_server perfprofd:fd use;
+')
+
# Manage /data/backup.
allow system_server backup_data_file:dir create_dir_perms;
allow system_server backup_data_file:file create_file_perms;