We require AFW policy deny work apps to access media card. This way we can block the AFW work container from accessing the sd card for passing work files through to personal space, thereby bypassing device storage separation.

Comments