# Allow update_engine and update_engine_sideload (recovery) read/write on the | |
# device-specific partitions it should update. | |
allow update_engine_common { | |
custom_ab_block_device | |
xbl_block_device | |
ssd_block_device | |
modem_block_device | |
}:blk_file rw_file_perms; |