[Sony Cross-Device General] munjeni:
This is all denials fixes colected from all dmesgs of this thread, converted to commad using tool https://xdaforums.com/showpost.php?p=70973513&postcount=120

ui_print "\nPatching $SEPOLICY"
if ! $POC init rootfs file relabelfrom,relabelto,create,write,unlink,setattr,execute_no_trans $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC init tad file relabelto,execute $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC init shell_data_file dir write,add_name,remove_name $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC init shell_data_file file create,write,open,setattr $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC tad tad capability dac_override $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC tad rootfs filesystem associate $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC tad rootfs file execute,execute_no_trans $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC tad shell_data_file dir getattr,search,write,add_name $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC tad shell_data_file file getattr,setattr,create,open,write,read,ioctl $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC tad sysfs file getattr,open,read $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC kernel tad fd use $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
if ! $POC kernel shell_data_file file getattr,setattr,open,write,read $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1 ; then exit 1 ; fi
$POC toolbox shell_data_file dir getattr,search,write,add_name $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC toolbox shell_data_file file getattr,setattr,create,open,write,read,ioctl $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC toolbox idd_rca_dir dir search $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC rmt_storage rmts file write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC per_mgr per_mgr capability net_raw $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC init securityfs file write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC init blkid_exec file getattr $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC init system_file file execute_no_trans,relabelfrom $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC init system_file dir relabelfrom $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC sensors diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC surfaceflinger diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC cnd diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC ims diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC apfd proc_net file read $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC xssm proc_net file read $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC thermal-engine diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC time_daemon diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC dpmd diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC mdtpdaemon diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC ipacm-diag diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC qti diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC netmgrd system_data_file file write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC netmgrd diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC rild diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC audioserver diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC location diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC system_server diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC system_server logd dir read $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC system_server unlabeled file unlink $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC system_server dex2oat_exec file execute $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC perfd device file open $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC dataservice_app diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC logd kernel system module_request $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC ssrapp log_device dir search $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC zygote input_device dir read $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC shell shell capability sys_nice $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC qcomsysd diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC mm-pp-daemon diag_device chr_file read,write $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC ipacm ipacm-diag unix_dgram_socket sendto $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC isolated_app shell_data_file dir search $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1
$POC healthd rootfs file entrypoint $SEPOLICY $SEPOLICY NULL >/dev/null 2>&1

New version is out, included all colected selinux denial fixes, this will solve common bugs from stock and custom rom!