diff --git a/private/vendor_init.te b/private/vendor_init.te
index c99d96f81d38f0816652d1e6f8c40388ecd0ba22..5d97f7269e6f7915c2a5fe31ad26ee79460775d7 100644
--- a/private/vendor_init.te
+++ b/private/vendor_init.te
@@ -1,2 +1,6 @@
 typeattribute vendor_init coredomain;
 
+# Creating files on sysfs is impossible so this isn't a threat
+# Sometimes we have to write to non-existent files to avoid conditional
+# init behavior. See b/35303861 for an example.
+dontaudit vendor_init sysfs:dir write;