vendor:sepolicy disable (unbreak build)
Change-Id: Idbf8b5cbfacc0f9a3bdec885db37ee7b851428d6
diff --git a/sepolicy/private/file_contexts b/sepolicy/private/file_contexts
index f7f40ff..1c7011b 100644
--- a/sepolicy/private/file_contexts
+++ b/sepolicy/private/file_contexts
@@ -7,5 +7,5 @@
/sys/block/[^/]+/queue/scheduler u:object_r:sysfs_block_scheduler:s0
/system/bin/fsck\.ntfs u:object_r:fsck_exec:s0
-/system/bin/fsck\.exfat u:object_r:fsck_exec:s0
+#/system/bin/fsck\.exfat u:object_r:fsck_exec:s0
/system/bin/mount\.exfat u:object_r:fsck_exec:s0
diff --git a/sepolicy/private/otapreopt_chroot.te b/sepolicy/private/otapreopt_chroot.te
index d733f14..3d965e2 100644
--- a/sepolicy/private/otapreopt_chroot.te
+++ b/sepolicy/private/otapreopt_chroot.te
@@ -1,2 +1,2 @@
allow otapreopt_chroot postinstall_file:lnk_file read;
-allow otapreopt_chroot system_file:dir mounton;
+#allow otapreopt_chroot system_file:dir mounton;
diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index 89e89b6..d4d190a 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -8,7 +8,7 @@
allow update_engine { otapreopt_chroot_exec toolbox_exec }:file rx_file_perms;
allow update_engine labeledfs:filesystem mount;
-allow update_engine rootfs:file { create setattr write rx_file_perms unlink relabelfrom rename };
+allow update_engine rootfs:file { rx_file_perms relabelfrom };
allow update_engine rootfs:dir { create write open add_name read rmdir remove_name };
allow update_engine system_data_file:file { create read write open unlink };