sepolicy: allow settings to read selinux status

Change-Id: I218433da3c257a80ad4cd63230c8040292123804
diff --git a/sepolicy/private/system_app.te b/sepolicy/private/system_app.te
new file mode 100644
index 0000000..08e4db4
--- /dev/null
+++ b/sepolicy/private/system_app.te
@@ -0,0 +1,4 @@
+#selinux status
+allow system_app selinuxfs:file r_file_perms;
+
+