 +allow vold proc:file write;
 +allow vold self:capability sys_boot;
 +allow vold init_tmpfs:file { open read };
++
++# Required for decryption
++allow vold unlabeled:dir mounton;
++allow vold platform_app_data_file:dir write;
++allow vold shell_data_file:dir write;
++allow vold nfc_data_file:dir write;
++allow vold download_file:dir write;
++allow vold radio_data_file:dir write;
++allow vold bluetooth_data_file:dir write;
++allow vold ecryptfs:lnk_file read;
 -- 
 1.7.9.5
 

 installd.te       |    5 +++++
 property_contexts |    1 +
 te_macros         |   11 +++++++++++
 vold.te           |   34 ++++++++++++++++++++++++++++++++++
 6 files changed, 57 insertions(+)

diff --git a/file.te b/file.te
index aefa9a6..30ffa3f 100644

 # Allows this domain to use the relabelto permission
 define(`relabelto_domain', `
diff --git a/vold.te b/vold.te
index 1fce7bd..d11a160 100644
--- a/vold.te
+++ b/vold.te
@@ -66,3 +66,47 @@ allow vold asec_image_file:dir rw_dir_perms;
 security_access_policy(vold)
 allow vold asec_apk_file:dir { rw_dir_perms setattr };
 allow vold asec_apk_file:file { r_file_perms setattr };
