platform_system_sepolicy/private/sdcardd.te

# type_transition must be private policy the domain_trans rules could stay
# public, but conceptually should go with this
type_transition sdcardd system_data_file:{ dir file } media_rw_data_file;