# vold
allow vold efs_file:dir { getattr read open ioctl };

# For 'aes-*' module requests.
allow vold kernel:system module_request;