omni: Update update_engine sepolicy with platform signature
Change-Id: Iebd041dde2eab8ae8f329b7cf260de535a0fd1e6
diff --git a/sepolicy/private/platform_app.te b/sepolicy/private/platform_app.te
index 4a18654..c568299 100644
--- a/sepolicy/private/platform_app.te
+++ b/sepolicy/private/platform_app.te
@@ -2,3 +2,6 @@
# Allow FOD HAL service to be found
hal_client_domain(platform_app, hal_omni_fod)
+
+allow platform_app update_engine_service:service_manager find;
+binder_call(platform_app, update_engine)
diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index 3114343..a0d1cf5 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -36,3 +36,6 @@
allow update_engine vendor_overlay_file:file { getattr read };
allow update_engine linkerconfig_file:dir { getattr };
allow update_engine update_engine:capability { kill };
+allow update_engine fuse:file r_file_perms;
+allow update_engine otadexopt_service:service_manager find;
+binder_call(update_engine, platform_app)