Merge "Clarify sysfs_leds neverallow." am: e58fa548

am: ca07f29d

Change-Id: I4a3ad8c305936b84a93b05c7f9c67209fe3168a2

private/coredomain.te

@@ -4,14 +4,13 @@ get_prop(coredomain, exported_pm_prop)
 full_treble_only(`
 neverallow {
     coredomain
+
+    # for chowning
     -init
-    -vendor_init
 
     # generic access to sysfs_type
     -ueventd
+    -vendor_init
     -vold
-    -priv_app
-    -storaged
-    -system_app
 } sysfs_leds:file *;
 ')