Merge "Clarify sysfs_leds neverallow." am: e58fa548 am: ca07f29d

am: e1ccb27f

Change-Id: Icb574694fc56ee5543a41ad141efdfa70ce1e235

private/coredomain.te

@@ -4,14 +4,13 @@ get_prop(coredomain, exported_pm_prop)
 full_treble_only(`
 neverallow {
     coredomain
+
+    # for chowning
     -init
-    -vendor_init
 
     # generic access to sysfs_type
     -ueventd
+    -vendor_init
     -vold
-    -priv_app
-    -storaged
-    -system_app
 } sysfs_leds:file *;
 ')