sepolicy/vendor/init.te

allow init boot_block_device:lnk_file relabelto;
allow init dtbo_block_device:lnk_file relabelto;

allow init efs_file:dir mounton;
allow init mnt_vendor_file:dir mounton;

allow init socket_device:sock_file { create setattr unlink };

allow init kernel:system module_request;

allow init sysfs_block_writable:file rw_file_perms;