sepolicy/domain.te

allow domain block_device:dir { search getattr }; 
allow domain block_device:blk_file getattr;
allow domain cache_block_device:blk_file getattr;
allow domain userdata_block_device:blk_file getattr;
allow domain fuse_device:chr_file getattr;