sepolicy/kernel.te

userfastboot_only(`
  # This is the loop back fd used by userfastboot to mount and verify the
  # bootloader image
  allow kernel userfastboot:fd use;
')