sepolicy/vendor/update_verifier.te

# update_verifier reads /sys/block/dm-X/dm/name to find the device-mapper
# entries for system and vendor partitions.
allow update_verifier sysfs:file r_file_perms;
allow update_verifier sysfs:dir r_dir_perms;