Merge "Allow vendor_init to write to misc_block_device" into pi-dev
diff --git a/public/domain.te b/public/domain.te
index 1b7bbd4..f0867a4 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -600,6 +600,7 @@
-init
-uncrypt
-update_engine
+ -vendor_init
-vold
-recovery
-ueventd
diff --git a/public/vendor_init.te b/public/vendor_init.te
index 0237861..e2b7ec4 100644
--- a/public/vendor_init.te
+++ b/public/vendor_init.te
@@ -146,6 +146,9 @@
# Vendor init can perform operations on trusted and security Extended Attributes
allow vendor_init self:global_capability_class_set sys_admin;
+# Raw writes to misc block device
+allow vendor_init misc_block_device:blk_file w_file_perms;
+
not_compatible_property(`
set_prop(vendor_init, {
property_type