1# vendor_misc_writer 2type vendor_misc_writer, domain; 3type vendor_misc_writer_exec, vendor_file_type, exec_type, file_type; 4 5# Raw writes to misc_block_device 6allow vendor_misc_writer misc_block_device:blk_file w_file_perms; 7allow vendor_misc_writer block_device:dir r_dir_perms; 8 9# Silence the denial when calling libfstab's ReadDefaultFstab, which tries to 10# load DT fstab. 11dontaudit vendor_misc_writer proc_cmdline:file r_file_perms; 12dontaudit vendor_misc_writer sysfs_dt_firmware_android:dir search; 13dontaudit vendor_misc_writer proc_bootconfig:file r_file_perms; 14 15# Allow ReadDefaultFstab(). 16read_fstab(vendor_misc_writer) 17