you do not have an allow rule for misc block device  shouldn t you have the following  allow update engine misc block device blk file rw file perms otherwise  nobody will be able to do anything with misc block device 