cm: sepolicy: fix denials for external storage
Change-Id: I784a859671c69370cab0118a88a5fb0190352af9
diff --git a/sepolicy/vold.te b/sepolicy/vold.te
index 9b7313c..efca286 100644
--- a/sepolicy/vold.te
+++ b/sepolicy/vold.te
@@ -14,3 +14,8 @@
recovery_only(`
allow vold rootfs:dir { add_name write };
')
+
+# External storage
+allow vold storage_stub_file:dir { rw_file_perms search add_name };
+allow vold mnt_media_rw_stub_file:dir r_dir_perms;
+allow vold mkfs_exec:file { execute read open execute_no_trans };