Merge "Allow zygote to create files under sdcardfs."
diff --git a/private/zygote.te b/private/zygote.te
index c8bd87e..9fc0998 100644
--- a/private/zygote.te
+++ b/private/zygote.te
@@ -100,7 +100,8 @@
# TODO: reduce this back to only sdcardfs once b/123533205 is root-caused
# (Technically "sdcardfs" and "media_rw_data_file" are equivalent, since
# sdcardfs simply wraps files stored under /data/media.)
-allow zygote { sdcardfs media_rw_data_file vfat }:dir { create_dir_perms mounton };
+allow zygote { sdcard_type media_rw_data_file }:dir { create_dir_perms mounton };
+allow zygote { sdcard_type media_rw_data_file }:file { create_file_perms };
# Handle --invoke-with command when launching Zygote with a wrapper command.
allow zygote zygote_exec:file rx_file_perms;