sepolicy/vendor/init.te

allow init efs_file:dir mounton;
allow init socket_device:sock_file { create setattr unlink };
allow init sysfs_block_writable:file { open write };