diff --git a/sepolicy/vold.te b/sepolicy/vold.te
index 9b7313c..efca286 100644
--- a/sepolicy/vold.te
+++ b/sepolicy/vold.te
@@ -14,3 +14,8 @@
 recovery_only(`
   allow vold rootfs:dir { add_name write };
 ')
+
+# External storage
+allow vold storage_stub_file:dir { rw_file_perms search add_name };
+allow vold mnt_media_rw_stub_file:dir r_dir_perms;
+allow vold mkfs_exec:file { execute read open execute_no_trans };