diff --git a/sepolicy/fsck_untrusted.te b/sepolicy/fsck_untrusted.te
index 0981fb2..c1ba526 100644
--- a/sepolicy/fsck_untrusted.te
+++ b/sepolicy/fsck_untrusted.te
@@ -11,3 +11,9 @@
 allow fsck_untrusted media_rw_data_file:dir { search getattr };
 allow fsck_untrusted tmpfs:dir { search };
 
+allow fsck_untrusted toolbox_exec:file entrypoint;
+allow fsck_untrusted toolbox_exec:file r_file_perms;
+allow fsck_untrusted exfat:filesystem mount;
+allow fsck_untrusted self:capability sys_rawio;
+allow fsck_untrusted ntfs:filesystem mount;
+
diff --git a/sepolicy/platform_app.te b/sepolicy/platform_app.te
index 90e4f12..4e9ce97 100644
--- a/sepolicy/platform_app.te
+++ b/sepolicy/platform_app.te
@@ -16,3 +16,9 @@
 
 # MatLog calls dmesg
 allow platform_app kernel:system syslog_read;
+
+# no-fuse
+allow platform_app exfat:dir { rw_dir_perms create_dir_perms };
+allow platform_app exfat:file { rw_file_perms create_file_perms };
+allow platform_app ntfs:dir { rw_dir_perms create_dir_perms };
+allow platform_app ntfs:file { rw_file_perms create_file_perms };