# Allow update_engine and update_engine_sideload (recovery) read/write on the # device-specific partitions it should update. allow update_engine_common { ab_block_device xbl_block_device modem_block_device }:blk_file rw_file_perms;