diff --git a/non_plat/vold.te b/non_plat/vold.te
index d946bbc..8679bc7 100644
--- a/non_plat/vold.te
+++ b/non_plat/vold.te
@@ -31,3 +31,16 @@ dontaudit vold nvdata_file:dir r_dir_perms;
 dontaudit vold nvcfg_file:dir r_dir_perms;
 dontaudit vold protect_f_data_file:dir r_dir_perms;
 dontaudit vold protect_s_data_file:dir r_dir_perms;
+
+# execute mke2fs when format as internal
+allow vold cache_block_device:blk_file getattr;
+allowxperm vold dm_device:blk_file ioctl {
+  BLKSECDISCARD BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET
+};
+allow vold nvcfg_block_device:blk_file getattr;
+allow vold nvdata_device:blk_file getattr;
+allow vold proc_swaps:file r_file_perms;
+allow vold protect1_block_device:blk_file getattr;
+allow vold protect2_block_device:blk_file getattr;
+allow vold proc_swaps:file getattr;
+allow vold swap_block_device:blk_file getattr;