Merge "Clarify sysfs_leds neverallow."
diff --git a/private/coredomain.te b/private/coredomain.te
index c8f2b1d..84d7a8f 100644
--- a/private/coredomain.te
+++ b/private/coredomain.te
@@ -4,14 +4,13 @@
 full_treble_only(`
 neverallow {
     coredomain
+
+    # for chowning
     -init
-    -vendor_init
 
     # generic access to sysfs_type
     -ueventd
+    -vendor_init
     -vold
-    -priv_app
-    -storaged
-    -system_app
 } sysfs_leds:file *;
 ')