sepolicy: Allow system server to r/w the bpf maps

am: 756dd574

Change-Id: I747966d12d4f92b010a835f16c7309761ea4f16b

private/system_server.te

@@ -725,6 +725,11 @@ with_asan(`
   allow system_server zygote_exec:file rx_file_perms;
 ')
 
+# allow system_server to read the eBPF maps that stores the traffic stats information amd clean up
+# the map after snapshot is recorded
+allow system_server fs_bpf:file write;
+allow system_server netd:bpf { map_read map_write };
+
 # ART Profiles.
 # Allow system_server to open profile snapshots for read.
 # System server never reads the actual content. It passes the descriptor to