sepolicy/vendor/fastbootd.te

allow fastbootd {
    dtb_block_device
    system_block_device
}:blk_file rw_file_perms;
allowxperm fastbootd system_block_device:blk_file ioctl { BLKDISCARD BLKSECDISCARD };