sepolicy/uncrypt.te

# OTA with encrypted f2fs
allow uncrypt self:capability fowner;

allow uncrypt proc:file r_file_perms;