sepolicy/update_engine_common.te

# Allow update_engine and update_engine_sideload (recovery) read/write on the
# device-specific partitions it should update.
allow update_engine_common {
  custom_ab_block_device
  xbl_block_device
  ssd_block_device
  modem_block_device
}:blk_file rw_file_perms;