allow policy to create a file by vfat (fs_type) for a case using sdcardfs

am: 362d6ff1 Change-Id: Ibe19ac1955bad48b5fa1db7ffada46aa78781781

allow policy to create a file by vfat (fs_type) for a case using sdcardfs
0f38c642 · Eric Bae · android-build-merger · e88095d8 · 362d6ff1 · 0f38c642
Commit 0f38c642 authored 8 years ago by Eric Bae Committed by android-build-merger 8 years ago
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -170,6 +170,7 @@ neverallow untrusted_app {
  fs_type
  -fuse                     # sdcard
  -sdcardfs                 # sdcard
+  -vfat
  file_type
  -app_data_file            # The apps sandbox itself
  -media_rw_data_file       # Internal storage. Known that apps can