1get_prop(coredomain, pm_prop)
2get_prop(coredomain, exported_pm_prop)
3
4full_treble_only(`
5neverallow {
6    coredomain
7
8    # for chowning
9    -init
10
11    # generic access to sysfs_type
12    -ueventd
13    -vold
14} sysfs_leds:file *;
15')
16