sepolicy: allow vold to create files on external sdcard
This is required for ASEC support. Vold can already create and
access directories, but do not yet have the permission for files.
Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901
diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index 26d2caa..16a0e79 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -13,4 +13,5 @@
genfs_contexts \
installd.te \
seapp_contexts \
+ vold.te \
mac_permissions.xml
diff --git a/sepolicy/vold.te b/sepolicy/vold.te
new file mode 100644
index 0000000..2451442
--- /dev/null
+++ b/sepolicy/vold.te
@@ -0,0 +1,2 @@
+# Allow vold to manage ASEC
+allow vold sdcard_external:file create_file_perms;