diff --git a/platform_app.te b/platform_app.te index c152f47a6..2afe4d8ac 100644 --- a/platform_app.te +++ b/platform_app.te @@ -28,6 +28,12 @@ allow platform_app media_rw_data_file:file create_file_perms; allow platform_app cache_file:dir create_dir_perms; allow platform_app cache_file:file create_file_perms; +# Direct access to vold-mounted storage under /mnt/media_rw +# This is a performance optimization that allows platform apps to bypass the FUSE layer +allow platform_app mnt_media_rw_file:dir r_dir_perms; +allow platform_app vfat:dir create_dir_perms; +allow platform_app vfat:file create_file_perms; + allow platform_app drmserver_service:service_manager find; allow platform_app mediaserver_service:service_manager find; allow platform_app persistent_data_block_service:service_manager find;