diff --git a/public/domain.te b/public/domain.te
index 142c10b202c5822f06d7bb9492189d74e07a018a..f9b66880ea43125881a8fae9fd41360bb5f8e8d8 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -1116,12 +1116,10 @@ neverallow ~coredomain coredomain_hwservice:hwservice_manager add;
 neverallow * same_process_hwservice:hwservice_manager add;
 
 # On TREBLE devices, most coredomains should not access vendor_files.
-# TODO(b/71553434): Remove exceptions here.
 full_treble_only(`
   neverallow {
     coredomain
-    -appdomain
-    -bootanim
+    -halclientdomain
     -init
     -ueventd
     -crash_dump