vendor: sepolicy for ota

Change-Id: I01b149db633a8070348dea2ff73705132dd4750a
diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index d4d190a..878a49d 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -21,3 +21,7 @@
 allow update_engine toolbox_exec:file { execute getattr };
 
 allow update_engine sepolicy_file:file { append };
+
+allow update_engine gsi_metadata_file:dir search;
+allow update_engine rootfs:file { create write };
+