# Allow update engine to reach uefi block device
allow hal_bootctl_default vendor_uefi_block_device:blk_file getattr;