Allow update_engine to read postinstall_mnt_dir am: 8f687053 am: 0bcb2030 am: b197b7c8

am: 0b2209bf

Change-Id: I2b8009c16046259a494dad10b005e3539fa24a85

public/update_engine_common.te

@@ -19,7 +19,7 @@ allow update_engine_common rootfs:file r_file_perms;
 
 # Allow update_engine_common to mount on the /postinstall directory and reset the
 # labels on the mounted filesystem to postinstall_file.
-allow update_engine_common postinstall_mnt_dir:dir mounton;
+allow update_engine_common postinstall_mnt_dir:dir { mounton getattr search };
 allow update_engine_common postinstall_file:filesystem { mount unmount relabelfrom relabelto };
 allow update_engine_common labeledfs:filesystem relabelfrom;