| # Allow vold to manage ASEC |
| allow vold sdcard_external:file create_file_perms; |
| |
| # Allow vold to change context for mounted ext4 sdcard |
| relabelto_domain(vold) |
| allow vold labeledfs:filesystem { relabelfrom }; |
| |
| # Allow vold to access fuse for fuse-based fs |
| allow vold fuse_device:chr_file rw_file_perms; |
| |
| # NTFS-3g wants to drop permission |
| allow vold self:capability { setgid setuid }; |
| |
| # Allow vold to relabel sdcard fs mounts |
| allow vold unlabeled:filesystem { relabelfrom }; |
| allow vold sdcard_external:filesystem { relabelfrom relabelto }; |