allow policy to create a file by vfat (fs_type) for a case using sdcardfs

am: 320a0f54 Change-Id: I6aec72f8175839f4fefeb50f86fedc4202c776b8

allow policy to create a file by vfat (fs_type) for a case using sdcardfs
69270e53 · Eric Bae · android-build-merger · eba62067 · 320a0f54 · 69270e53
Commit 69270e53 authored 8 years ago by Eric Bae Committed by android-build-merger 8 years ago
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -187,6 +187,7 @@ neverallow untrusted_app {
  fs_type
  -fuse                     # sdcard
  -sdcardfs                 # sdcard
+  -vfat
  file_type
  -app_data_file            # The apps sandbox itself
  -media_rw_data_file       # Internal storage. Known that apps can