sepolicy/vendor/init.te

allow init efs_file:dir mounton;
allow init mnt_vendor_file:dir mounton;

allow init tmpfs:lnk_file create;

allow init kernel:system module_request;

allow init socket_device:sock_file { create setattr unlink };