Allow postinstall script to invoke `pm` shell commands.
Bug: 311377497
Change-Id: I46653dcbbe1d1b87b3d370bee80aae2d60998fbe
Test: manual - Install an OTA package and see the hook called.
diff --git a/private/postinstall.te b/private/postinstall.te
index 7060c59..92ddbbf 100644
--- a/private/postinstall.te
+++ b/private/postinstall.te
@@ -3,3 +3,6 @@
domain_auto_trans(postinstall, otapreopt_chroot_exec, otapreopt_chroot)
allow postinstall rootfs:dir r_dir_perms;
+
+# Allow invoking `pm` shell commands.
+allow postinstall package_service:service_manager find;