diff --git a/sepolicy/common/fsck_untrusted.te b/sepolicy/common/fsck_untrusted.te index e16c2b8..84a914d 100644 --- a/sepolicy/common/fsck_untrusted.te +++ b/sepolicy/common/fsck_untrusted.te @@ -2,3 +2,6 @@ allow fsck_untrusted block_device:dir getattr; # /data/media allow fsck_untrusted media_rw_data_file:dir getattr; + +allowxperm fsck_untrusted vold_device:blk_file ioctl 0x1271; +allowxperm fsck_untrusted vold_device:blk_file ioctl BLKROGET; diff --git a/sepolicy/common/vold.te b/sepolicy/common/vold.te index 5498768..352f411 100644 --- a/sepolicy/common/vold.te +++ b/sepolicy/common/vold.te @@ -7,3 +7,6 @@ allow vold { efs_block_device system_block_device }:blk_file getattr; + +allowxperm vold vold_device:blk_file ioctl 0x1271; +allowxperm vold vold_device:blk_file ioctl BLKROGET;