sepolicy/vold.te

###########################
# OmniROM common sepolicy
#

# Allow vold to access fuse for fuse-based fs
allow vold fuse_device:chr_file rw_file_perms;

# NTFS-3g wants to drop permission
allow vold self:capability { setgid setuid };

# Allow vold to relabel sdcard fs mounts
allow vold unlabeled:filesystem { relabelfrom };
allow vold sdcard_external:filesystem { relabelfrom relabelto };

# Allow vold to manage ASEC
allow vold sdcard_external:file create_file_perms;

# Allow vold to change context for mounted ext4 sdcard
relabelto_domain(vold)
allow vold labeledfs:filesystem { relabelfrom };
allow vold sdcard_external:filesystem { relabelfrom relabelto };