# /efs
allow vold efs_file:dir r_dir_perms;
# /dev/block/mmcblk0p[0-9]
allow vold emmcblk_device:dir create_dir_perms;
allow vold emmcblk_device:blk_file { ioctl read write create getattr setattr lock append unlink open };

# sysfs_virtual
allow vold sysfs_virtual:file write;