Merge "Allow virtual camera binder call to surface flinger" into android15-tests-dev
diff --git a/private/property.te b/private/property.te
index 7907dbc..e66913f 100644
--- a/private/property.te
+++ b/private/property.te
@@ -752,7 +752,9 @@
 neverallow {
   domain
   -init
+  -keystore
   -shell
+  -system_server
   -rkpdapp
 } remote_prov_prop:property_service set;