sepolicy/vendor/init.te

allow init block_device:blk_file write;
allow init bt_firmware_file:filesystem getattr;
allow init firmware_file:filesystem getattr;
allow init hidl_base_hwservice:hwservice_manager add;
allow init hwservicemanager:binder transfer;
allow init socket_device:sock_file { create setattr };
allow init sysfs_graphics:file { open read write };