Merge "Switch Keymaster HAL policy to _client/_server"
diff --git a/public/init.te b/public/init.te
index a65bf2c..86f062a 100644
--- a/public/init.te
+++ b/public/init.te
@@ -27,9 +27,11 @@
# /dev/device-mapper, /dev/block(/.*)?
allow init tmpfs:{ chr_file blk_file } relabelfrom;
allow init tmpfs:blk_file getattr;
-allow init block_device:{ dir blk_file } relabelto;
+allow init block_device:{ dir blk_file lnk_file } relabelto;
allow init dm_device:{ chr_file blk_file } relabelto;
allow init kernel:fd use;
+# restorecon for early mount device symlinks
+allow init tmpfs:lnk_file { getattr read relabelfrom };
# setrlimit
allow init self:capability sys_resource;