Merge "vold: allow FS_IOC_FIEMAP" am: b7d36521

am: 8551db90

Change-Id: I219705e2f6a8f39a549b017fbbb97cc4da1bf1a1

public/vold.te

@@ -53,6 +53,12 @@ allowxperm vold data_file_type:dir ioctl {
   FS_IOC_SET_ENCRYPTION_POLICY
 };
 
+# Find the location on the raw block device where the
+# crypto key is stored so it can be destroyed
+allowxperm vold vold_data_file:file ioctl {
+  FS_IOC_FIEMAP
+};
+
 typeattribute vold mlstrustedsubject;
 allow vold self:process setfscreate;
 allow vold system_file:file x_file_perms;