sepolicy/vendor/vendor_init.te

get_prop(vendor_init, vendor_radio_prop);

allow vendor_init cgroup:file getattr;
allow vendor_init tmpfs:dir { write add_name };
allow vendor_init tmpfs:lnk_file create;
allow vendor_init functionfs:file getattr;
allow vendor_init debugfs_trace_marker:file getattr;

allow vendor_init proc_swappiness:file rw_file_perms;

allow vendor_init cpdebug_efs_file:lnk_file { getattr setattr };
allow vendor_init pdp_efs_file:file getattr;

dontaudit vendor_init system_prop:file read;