Merge "Allowing vold to search /mnt/vendor/*"
diff --git a/public/domain.te b/public/domain.te
index c6fc9f8..5dcfdf8 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -1391,6 +1391,7 @@
coredomain
-init
-ueventd
+ -vold
} mnt_vendor_file:dir *;
# Only apps are allowed access to vendor public libraries.
diff --git a/public/vold.te b/public/vold.te
index 481f48c..1aa616b 100644
--- a/public/vold.te
+++ b/public/vold.te
@@ -213,6 +213,9 @@
# Raw writes to misc block device
allow vold misc_block_device:blk_file w_file_perms;
+# vold might need to search or mount /mnt/vendor/*
+allow vold mnt_vendor_file:dir search;
+
neverallow {
domain
-vold