allow policy to create a file by vfat (fs_type) for a case using sdcardfs

am: 320a0f54 Change-Id: Id8486a660a4426798f2843d3c2e33c9c64447fd6

allow policy to create a file by vfat (fs_type) for a case using sdcardfs
am: 320a0f54 Change-Id: Id8486a660a4426798f2843d3c2e33c9c64447fd6
98262719 · Eric Bae · android-build-merger · 4d6f70e5 · 320a0f54 · 98262719
Commit 98262719 authored 8 years ago by Eric Bae Committed by android-build-merger 8 years ago
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -170,6 +170,7 @@ neverallow untrusted_app {
  fs_type
  -fuse                     # sdcard
  -sdcardfs                 # sdcard
+  -vfat
  file_type
  -app_data_file            # The apps sandbox itself
  -media_rw_data_file       # Internal storage. Known that apps can