diff --git a/init.te b/init.te
index 5068d89b99a68f58e47dc97807f224de4fc984d3..e55bc96317fbc1dd78993661935e82291e93593d 100644
--- a/init.te
+++ b/init.te
@@ -20,6 +20,11 @@ allow init properties_serial:file { write relabelto };
 allow init property_type:file { create_file_perms relabelto };
 # /dev/socket
 allow init { device socket_device }:dir relabelto;
+# /dev/device-mapper, /dev/block(/.*)?
+allow init tmpfs:{ chr_file blk_file } relabelfrom;
+allow init tmpfs:blk_file getattr;
+allow init block_device:{ dir blk_file } relabelto;
+allow init dm_device:{ chr_file blk_file } relabelto;
 
 # setrlimit
 allow init self:capability sys_resource;