sepolicy/private/vold.te

#============= vold ==============
allow vold block_device:blk_file { getattr };
allow vold fsck_exec:lnk_file read;