From adf210d654c19c51ab0fdd7e7b20d7864201134f Mon Sep 17 00:00:00 2001
From: Eric Bae <eric.bae@lge.com>
Date: Tue, 19 Jul 2016 14:30:00 -0700
Subject: [PATCH] allow policy to create a file by vfat (fs_type) for a case
 using sdcardfs

Change-Id: Ia938d73b1a49b9ba4acf906df37095d21edee22e
---
 untrusted_app.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/untrusted_app.te b/untrusted_app.te
index 6bc68437f..c17e95421 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -182,6 +182,7 @@ neverallow untrusted_app {
   fs_type
   -fuse                     # sdcard
   -sdcardfs                 # sdcard
+  -vfat
   file_type
   -app_data_file            # The apps sandbox itself
   -media_rw_data_file       # Internal storage. Known that apps can