Merge "Disallow sysfs_leds to coredomains." am: 5d5284ad am: abe248d1

am: 977949e3

Change-Id: I9b145b354413e77e02b67e83f411cec709c7d8e1

private/coredomain.te

 get_prop(coredomain, pm_prop)
 get_prop(coredomain, exported_pm_prop)
+
+full_treble_only(`
+neverallow {
+    coredomain
+    -init
+    -vendor_init
+
+    # generic access to sysfs_type
+    -ueventd
+    -vold
+    -priv_app
+    -storaged
+    -system_app
+} sysfs_leds:file *;
+')