sepolicy/platform_app.te

# Direct access to vold-mounted storage under /mnt/media_rw
# This is a performance optimization that allows platform apps to bypass the FUSE layer
allow platform_app sdcard_posix:dir create_dir_perms;
allow platform_app sdcard_posix:file create_file_perms;

# Allow Gallery3D to crop user images
allow platform_app system_app_data_file:file rw_file_perms;

# Allow Gallery3D to execute render scripts
allow platform_app app_data_file:file execute;