1allow init mnt_vendor_file:dir mounton; 2allow init custom_ab_block_device:lnk_file relabelto; 3 4# This is needed for chaining a boot partition vbmeta 5# descriptor, where init will probe the boot partition 6# to read the chained vbmeta in the first-stage, then 7# relabel /dev/block/by-name/boot_[a|b] to block_device 8# after loading sepolicy in the second stage. 9allow init boot_block_device:lnk_file relabelto; 10 11allow init persist_file:dir mounton; 12allow init ram_device:blk_file w_file_perms; 13 14