Update neverallow exception.
This fixes an incorrect exception in the neverallow rule.
Test: Built policy for all lunch targets.
Change-Id: I283833131c6f1fd741e934de24c838594ac38a18
diff --git a/public/domain.te b/public/domain.te
index f9b6688..142c10b 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -1116,10 +1116,12 @@
neverallow * same_process_hwservice:hwservice_manager add;
# On TREBLE devices, most coredomains should not access vendor_files.
+# TODO(b/71553434): Remove exceptions here.
full_treble_only(`
neverallow {
coredomain
- -halclientdomain
+ -appdomain
+ -bootanim
-init
-ueventd
-crash_dump