allow policy to create a file by vfat (fs_type) for a case using sdcardfs am:...

allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: 320a0f54 am: 98262719
am: a031c3f6

Change-Id: I51d2888d0f4ef26a1d96778ef0568cb51f6367fb

untrusted_app.te

@@ -171,6 +171,7 @@ neverallow untrusted_app {
   fs_type
   -fuse                     # sdcard
   -sdcardfs                 # sdcard
+  -vfat
   file_type
   -app_data_file            # The apps sandbox itself
   -media_rw_data_file       # Internal storage. Known that apps can