release-request-95254fbf-05c4-4fa6-8209-f25a3574f523-for-aosp-nougat-cts-release-3942234 snap-temp-L04000000057699126

Change-Id: I26e650ae666f2415347abccb10105fa6feda9eb6
diff --git a/domain.te b/domain.te
index 332db94..a853b3a 100644
--- a/domain.te
+++ b/domain.te
@@ -485,7 +485,7 @@
 
 # Only domains spawned from zygote and runas may have the appdomain attribute.
 neverallow { domain -runas -zygote } {
-  appdomain -shell userdebug_or_eng(`-su')
+  appdomain -shell userdebug_or_eng(`-su') -bluetooth
 }:process { transition dyntransition };
 
 # Minimize read access to shell- or app-writable symlinks.