diff --git a/sepolicy/private/file_contexts b/sepolicy/private/file_contexts
index 88b7ab1..297212f 100644
--- a/sepolicy/private/file_contexts
+++ b/sepolicy/private/file_contexts
@@ -7,4 +7,4 @@
 /sys/block/[^/]+/queue/scheduler                  u:object_r:sysfs_block_scheduler:s0
 
 /system/bin/fsck\.ntfs                            u:object_r:fsck_exec:s0
-/system/bin/mkfs\.exfat                           u:object_r:fsck_exec:s0
+/system/bin/mkfs\.exfat                           u:object_r:mkfs_exec:s0
diff --git a/sepolicy/private/mkfs.te b/sepolicy/private/mkfs.te
new file mode 100644
index 0000000..dbd97b8
--- /dev/null
+++ b/sepolicy/private/mkfs.te
@@ -0,0 +1,9 @@
+type mkfs, coredomain, domain;
+type mkfs_exec, exec_type, file_type;
+
+init_daemon_domain(mkfs)
+
+# Allow formatting userdata or cache partitions
+allow mkfs block_device:dir search;
+allow mkfs userdata_block_device:blk_file rw_file_perms;
+allow mkfs cache_block_device:blk_file rw_file_perms;