From 54c91b849cd9f651e55c9cbafccfb8083d7cb280 Mon Sep 17 00:00:00 2001
From: Pawit Pornkitprasan
Date: Tue, 10 Dec 2013 17:10:50 +0700
Subject: [PATCH] sepolicy: allow vold to mount fuse-based sdcard
exfat and NTFS-3g requires access to /dev/fuse
Change-Id: I35b13ada586c8de3fbe04156c2d10bf5e3c07b3a
---
sepolicy/vold.te | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/sepolicy/vold.te b/sepolicy/vold.te
index 98777662..3082575e 100644
--- a/sepolicy/vold.te
+++ b/sepolicy/vold.te
@@ -5,3 +5,9 @@ allow vold sdcard_external:file create_file_perms;
relabelto_domain(vold)
allow vold labeledfs:filesystem { relabelfrom };
allow vold sdcard_external:filesystem { relabelfrom relabelto };
+
+# Allow vold to access fuse for fuse-based fs
+allow vold fuse_device:chr_file rw_file_perms;
+
+# NTFS-3g wants to drop permission
+allow vold self:capability { setgid setuid };