diff --git a/sepolicy/vendor/update_engine.te b/sepolicy/vendor/update_engine.te
index 29464bb07c8a9d9074f2173ba9e2e7cd1d1648ae..9e1422a1e115b94969dfd41c33e4c8f6eeac717b 100644
--- a/sepolicy/vendor/update_engine.te
+++ b/sepolicy/vendor/update_engine.te
@@ -8,3 +8,7 @@ allow update_engine {
     firmware_file
     metadata_file
 }:dir search;
+
+allow update_engine block_device:dir search;
+
+allow update_engine vendor_custom_ab_block_device:blk_file rw_file_perms;
diff --git a/sepolicy/vendor/update_engine_common.te b/sepolicy/vendor/update_engine_common.te
index 62d5602924caaf1decea63d1fa1a787c5a6610cc..f1ad0a686f70a8a042c4468460c9a483be7fc038 100644
--- a/sepolicy/vendor/update_engine_common.te
+++ b/sepolicy/vendor/update_engine_common.te
@@ -34,6 +34,7 @@ allow update_engine_common {
     modem_block_device
     uefi_block_device
     recovery_block_device
+    vendor_custom_ab_block_device
 }:blk_file rw_file_perms;
 
 allow update_engine_common tmpfs:lnk_file r_file_perms;