change_profile requires separate permission rule to access /proc interface

When a profile contains a rule granting permission to use the change_profile interface

  Eg.
  change_profile -> **,

it is not enough permissions to actually use the interface, because write permission to access the interface at
   /proc/self/attr/{current,exec} w,

is also needed.

If a change_profile rule is present it should imply that this permission is granted