sepolicy/init.te

allow init functionfs:dir mounton;
allow init userdata_block_device:blk_file { open read write ioctl getattr };