vendor: sepolicy update

-changes for sdcard (from CM)
-changes for exfat OTG

Change-Id: I617d0188d53797866b71db0dbcbfc27bf3e35aa1
diff --git a/sepolicy/untrusted_app.te b/sepolicy/untrusted_app.te
new file mode 100644
index 0000000..b5a1a21
--- /dev/null
+++ b/sepolicy/untrusted_app.te
@@ -0,0 +1,8 @@
+###########################
+# OmniROM common sepolicy
+
+# exfat OTG
+userdebug_or_eng(`allow untrusted_app mnt_media_rw_file:dir getattr;'
+`allow untrusted_app asec_apk_file:dir getattr;'
+`allow untrusted_app fuse_device:file { getattr read };')
+