omni: ota sepolicy
no backup yet
Change-Id: If271c2bb59133791783964f21a13d3be657e9249
diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index c70e488..81873ed 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -1,7 +1,7 @@
r_dir_file(update_engine, mnt_user_file)
r_dir_file(update_engine, storage_file)
-allow update_engine self:capability { chown fsetid };
+allow update_engine self:capability { chown fsetid dac_read_search };
allow update_engine self:process { setexec };
allow update_engine labeledfs:filesystem { mount unmount };