rockchip: sepolicy: Add support for exfat utils

Signed-off-by: hmz007 <hmz007@gmail.com>

device/rockchip/common/sepolicy/vendor/file_contexts

@@ -51,6 +51,9 @@
 /system/bin/mkntfs   u:object_r:vold_exec:s0
 /system/bin/ntfsfix  u:object_r:fsck_exec:s0
 
+#for exfat
+/system/bin/mkfs.exfat  u:object_r:vold_exec:s0
+
 #for media
 /sys/firmware/devicetree/base/compatible     u:object_r:sysfs_dev:s0
 

device/rockchip/common/sepolicy/vendor/fsck.te

@@ -1,3 +1,13 @@
 allow fsck e2fsck_oem_block_device:blk_file rw_file_perms;
 allow fsck e2fsck_cache_block_device:blk_file rw_file_perms;
 allow fsck e2fsck_frp_block_device:blk_file rw_file_perms;
+
+allow fsck media_rw_data_file:dir getattr;
+
+allowxperm fsck vold_device:blk_file ioctl {
+  BLKSECDISCARD BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET
+};
+
+allowxperm fsck_untrusted vold_device:blk_file ioctl {
+  BLKDISCARD BLKGETSIZE BLKROGET
+};

device/rockchip/common/sepolicy/vendor/vold.te

@@ -15,3 +15,7 @@ allow vold sysfs_mmc:file rw_file_perms;
 allow vold self:capability sys_module;
 allow vold vendor_incremental_module:file r_file_perms;
 allow vold vendor_incremental_module:system module_load;
+
+allowxperm vold vold_device:blk_file ioctl {
+  BLKDISCARD BLKGETSIZE BLKROGET
+};