omni: Update update_engine sepolicy for fuse dir
Change-Id: Icef40887443ac60f7e7f2803b602fa01d9b85948
diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index a0d1cf5..912729d 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -1,5 +1,6 @@
r_dir_file(update_engine, mnt_user_file)
r_dir_file(update_engine, storage_file)
+r_dir_file(update_engine, fuse)
allow update_engine self:capability { chown fsetid dac_read_search };
allow update_engine self:process { setexec };
@@ -36,6 +37,5 @@
allow update_engine vendor_overlay_file:file { getattr read };
allow update_engine linkerconfig_file:dir { getattr };
allow update_engine update_engine:capability { kill };
-allow update_engine fuse:file r_file_perms;
allow update_engine otadexopt_service:service_manager find;
binder_call(update_engine, platform_app)