basic/plat_private/init.te

# ==============================================
# Common SEPolicy Rule
# ==============================================

# insmod LKM under /odm or /vendor
allow init self:capability sys_module;
allow init system_file:system module_load;

# boot process denial clean up
allow init sysfs_devices_system_cpu:file relabelfrom;

domain_auto_trans(init, mtk_plpath_utils_exec, update_engine)

#allow write for mobile_log_d.rc
allow init proc_dynamic_debug_control:file w_file_perms;