Snap for 4976052 from aeb1f6dc to pie-vts-release

Change-Id: I919ac85741ea6fee380533c91bd529077ead600b

Snap for 4976052 from aeb1f6dc to pie-vts-release
c44c37b2 · android-build-prod (mdb) · a545a4c7 · aeb1f6dc · c44c37b2
Commit c44c37b2 authored 6 years ago by android-build-prod (mdb)
--- a/public/domain.te
+++ b/public/domain.te
@@ -1033,7 +1033,10 @@ full_treble_only(`
      coredomain
      -shell
      -system_executes_vendor_violators
-    } vendor_file_type:file execute_no_trans;
+    } {
+      vendor_file_type
+      -same_process_hal_file
+    }:file execute_no_trans;
 ')
 # Only authorized processes should be writing to files in /data/dalvik-cache