diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index 26d2caab..16a0e796 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -13,4 +13,5 @@ BOARD_SEPOLICY_UNION += \
     genfs_contexts \
     installd.te \
     seapp_contexts \
+    vold.te \
     mac_permissions.xml
diff --git a/sepolicy/vold.te b/sepolicy/vold.te
new file mode 100644
index 00000000..24514422
--- /dev/null
+++ b/sepolicy/vold.te
@@ -0,0 +1,2 @@
+# Allow vold to manage ASEC
+allow vold sdcard_external:file create_file_perms;