Restrict isolated_app's /sys access
am: b67d85fdf6

Change-Id: I295d258de3e61869e0ebf338c7e21fbe22f81c44