diff --git a/sepolicy/vendor/fsck_untrusted.te b/sepolicy/vendor/fsck_untrusted.te
new file mode 100644
index 0000000..528a867
--- /dev/null
+++ b/sepolicy/vendor/fsck_untrusted.te
@@ -0,0 +1,4 @@
+r_dir_file(fsck_untrusted, sysfs_dm)
+
+# /data/media
+allow fsck_untrusted media_rw_data_file:dir getattr;