omni: Update gapps backup for A11
taken from opengapps A11 test build (2021-10-01)
Added also sepolicy related changes too
Change-Id: Ie0bb9fbbf7e67f0344a2ce97122ef47a7ffbd76b
diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index 81873ed..4e4f94b 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -15,7 +15,7 @@
allow update_engine system_data_file:file { create read write open unlink };
allow update_engine system_data_file:dir { create write add_name read remove_name unlink };
-allow update_engine system_file:file { create setattr write relabelto relabelfrom rx_file_perms unlink };
+allow update_engine system_file:file { create setattr write relabelto relabelfrom rename rx_file_perms unlink };
allow update_engine system_file:dir { create setattr write rmdir remove_name add_name setattr };
allow update_engine storage_file:lnk_file read;
@@ -24,10 +24,16 @@
allow update_engine sepolicy_file:file { append };
allow update_engine gsi_metadata_file:dir search;
-allow update_engine metadata_file:dir search;
-allow update_engine rootfs:file { create write };
+allow update_engine metadata_file:dir { getattr search };
+allow update_engine rootfs:file { append create write };
#####
allow update_engine proc_filesystems:file { getattr open read };
allow update_engine system_file:lnk_file { create rename };
allow update_engine system_lib_file:dir { add_name setattr write };
+allow update_engine system_lib_file:file { create relabelfrom setattr write };
+#allow update_engine vendor_overlay_file:dir { getattr search };
+allow update_engine vendor_overlay_file:file { getattr read };
+allow update_engine linkerconfig_file:dir { getattr };
+allow update_engine bt_firmware_file:dir { getattr search};
+allow update_engine update_engine:capability { kill };