From 4fc64db5c13cc450fbfd8ec2036511863476bc2a Mon Sep 17 00:00:00 2001
From: Sudheer Shanka <sudheersai@google.com>
Date: Mon, 24 Sep 2018 13:26:21 -0700
Subject: [PATCH] Allow zygote to mount on sdcardfs dirs.

Bug: 111890351
Test: manual
Change-Id: I37d632c9877c6d6f929937d8e25098763807630c
---
 private/zygote.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/private/zygote.te b/private/zygote.te
index 91c923019..3affec137 100644
--- a/private/zygote.te
+++ b/private/zygote.te
@@ -90,6 +90,8 @@ allow zygote mnt_user_file:dir create_dir_perms;
 allow zygote mnt_user_file:lnk_file create_file_perms;
 # Allowed to mount user-specific storage into place
 allow zygote storage_file:dir { search mounton };
+# Allow mounting on sdcardfs dirs
+allow zygote sdcardfs:dir { mounton };
 
 # Handle --invoke-with command when launching Zygote with a wrapper command.
 allow zygote zygote_exec:file rx_file_perms;