Add sepolices to update engine domain.

    While applying OTA update package, update engine
    loops through partitions entries/mountpoints.
    Add few policies and supress the dac ones.

- Allow update_engine to access recovery partition for OTA
- Allow update engine to access to metadata_file.
    With virtual-ab feature, update engine needs access
    to metadata_file, allow the same.

Change-Id: I07636f79870594a07755c54e55b5b6846e53c2e9
1 file changed
tree: 7faa0a7da5ea01371bfbea3300ebcbcd7a71ff6b
  1. generic/
  2. legacy/
  3. qva/
  4. SEPolicy.mk