vendor:sepolicy allow update_engine setexec

Change-Id: Ia590d56a25a5e27d2529ca5d7ecfc4a1724c9d39
diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index 70c37ec..9402552 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -2,6 +2,7 @@
 r_dir_file(update_engine, storage_file)
 
 allow update_engine self:capability { chown fsetid };
+allow update_engine self:process { setexec };
 
 allow update_engine labeledfs:filesystem { mount unmount };