sepolicy/vold.te

   1 # /efs
   2 allow vold efs_file:dir r_dir_perms;
   3 # /dev/block/mmcblk0p[0-9]
   4 allow vold emmcblk_device:dir create_dir_perms;
   5 allow vold emmcblk_device:blk_file { setattr unlink rw_file_perms };
   6
   7 allow vold sysfs_mmc:file w_file_perms;
   8 r_dir_file(vold, proc_dt_firmware)
   9
  10 # sswap
  11 allow vold sysfs_sswap:file w_file_perms;