diff --git a/private/system_app.te b/private/system_app.te
index 77cca3d01..01956f4ab 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -176,6 +176,10 @@ get_prop(system_app, oem_unlock_prop)
 # Allow system apps to act as Perfetto producers.
 perfetto_producer(system_app)
 
+# TODO(b/217368496): remove this.
+can_profile_heap(system_app)
+can_profile_perf(system_app)
+
 ###
 ### Neverallow rules
 ###