Update neverallow exception.
After offline discussions, we decided that this was the proper
exception to the neverallow rule.
Test: Built policy.
Change-Id: Ic1603bfdd803151ccfb79f90195b83b616acc873
diff --git a/public/domain.te b/public/domain.te
index f9b6688..142c10b 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -1116,10 +1116,12 @@
neverallow * same_process_hwservice:hwservice_manager add;
# On TREBLE devices, most coredomains should not access vendor_files.
+# TODO(b/71553434): Remove exceptions here.
full_treble_only(`
neverallow {
coredomain
- -halclientdomain
+ -appdomain
+ -bootanim
-init
-ueventd
-crash_dump