shared/sepolicy/vendor/vold.te

allow vold kernel:system module_request;

# vold will access /mnt/vendor/shared for unknown reasons
allow vold mnt_vendor_file:dir r_dir_perms;