diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index 26d2caa..16a0e79 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -13,4 +13,5 @@
     genfs_contexts \
     installd.te \
     seapp_contexts \
+    vold.te \
     mac_permissions.xml
diff --git a/sepolicy/vold.te b/sepolicy/vold.te
new file mode 100644
index 0000000..2451442
--- /dev/null
+++ b/sepolicy/vold.te
@@ -0,0 +1,2 @@
+# Allow vold to manage ASEC
+allow vold sdcard_external:file create_file_perms;