cm: sepolicy: Allow use of dexclassloader by systemserver

 * Needed for custom keyhandler.

Change-Id: Ifa57ad81951f9e1009eb291726cd8dfe36a3482e
diff --git a/sepolicy/system.te b/sepolicy/system.te
index ca07e6f..c75d4c3 100644
--- a/sepolicy/system.te
+++ b/sepolicy/system.te
@@ -6,3 +6,6 @@
 
 allow system_server dhcp_data_file:dir r_dir_perms;
 allow system_server dhcp_data_file:file r_file_perms;
+
+# System server dynamically loads some dexfiles
+allow system_server dex2oat_exec:file execute;