common/private/vold.te

# External storage
allow vold mkfs_exec:file { execute read open execute_no_trans };
allow vold mnt_media_rw_stub_file:dir r_dir_perms;
allow vold storage_stub_file:dir { rw_file_perms search add_name };