sepolicy: add rules for updater and update_engine
* We need special exceptions for update_engine scripts because we
handle backuptool operations through it.
* priv_app needs to be able to make ota package dirs in order to
put the ota in the correct spot.
Change-Id: I39d9d43ea4eb9e567c6ee24a4cd4f8969cd2bcdd
diff --git a/sepolicy/private/priv_app.te b/sepolicy/private/priv_app.te
new file mode 100644
index 0000000..1d7fca2
--- /dev/null
+++ b/sepolicy/private/priv_app.te
@@ -0,0 +1 @@
+allow priv_app ota_package_file:dir create_dir_perms;