diff --git a/public/vold.te b/public/vold.te
index 99f0bb384041c2b11b37e410ea92209fef67ee0f..118244a14979d5e6f94020df24d3f4de285ff340 100644
--- a/public/vold.te
+++ b/public/vold.te
@@ -190,3 +190,5 @@ neverallow { domain -vold -init } restorecon_prop:property_service set;
 
 neverallow vold fsck_exec:file execute_no_trans;
 neverallow { domain -init } vold:process { transition dyntransition };
+neverallow vold *:process ptrace;
+neverallow vold *:rawip_socket *;