| # Allow init to mount firmware |
| allow init firmware_file:dir mounton; |
| allow init firmware_file:filesystem { getattr mount relabelfrom }; |
| |
| allow init boot_block_device:lnk_file relabelto; |
| allow init custom_ab_block_device:lnk_file relabelto; |
| |
| allow init sysfs_scsi_devices_0000:file w_file_perms; |
| |
| # b/144264879 Thermal mitigation in recovery mode |
| recovery_only(` |
| allow init sysfs_thermal:file rw_file_perms; |
| allow init sysfs_poweroff:file w_file_perms; |
| ') |
| |
| allow init per_boot_file:file ioctl; |
| allowxperm init per_boot_file:file ioctl { F2FS_IOC_SET_PIN_FILE }; |
