| # vendor_misc_writer |
| type vendor_misc_writer, domain; |
| type vendor_misc_writer_exec, vendor_file_type, exec_type, file_type; |
| |
| # Raw writes to misc_block_device |
| allow vendor_misc_writer misc_block_device:blk_file w_file_perms; |
| allow vendor_misc_writer block_device:dir r_dir_perms; |
| |
| # Silence the denial when calling libfstab's ReadDefaultFstab, which tries to |
| # load DT fstab. |
| dontaudit vendor_misc_writer proc_cmdline:file read; |
| dontaudit vendor_misc_writer metadata_file:dir search; |
| dontaudit vendor_misc_writer sysfs_dt_firmware_android:dir search; |
