Each app domain should be defined under the installed partition's sepolicy. Since PixelSystemService is under system_ext, we should not define our sepolicy under vendor. Test: manually check if the error message is gone Fix: 293806319 Change-Id: Ifec3e58c44ef1b2bc522f44b874b0635edc38c12