sepolicy: allow vold to mount fuse-based sdcard
exfat and NTFS-3g requires access to /dev/fuse
Change-Id: I35b13ada586c8de3fbe04156c2d10bf5e3c07b3a
diff --git a/sepolicy/vold.te b/sepolicy/vold.te
index 9877766..3082575 100644
--- a/sepolicy/vold.te
+++ b/sepolicy/vold.te
@@ -5,3 +5,9 @@
relabelto_domain(vold)
allow vold labeledfs:filesystem { relabelfrom };
allow vold sdcard_external:filesystem { relabelfrom relabelto };
+
+# Allow vold to access fuse for fuse-based fs
+allow vold fuse_device:chr_file rw_file_perms;
+
+# NTFS-3g wants to drop permission
+allow vold self:capability { setgid setuid };