Restrict isolated_app's /sys access am: 29c6d8c1ab
am: 551cbe6ab2

Change-Id: I46cd4ee77bb43f76e44333cff33cd12fd5b4d508