recovery_only(` | |
permissive recovery; | |
permissive init; | |
permissive logd; | |
permissive adbd; | |
permissive fastbootd; | |
allow kernel unlabeled:file rw_file_perms; | |
allow kernel tmpfs:file { read }; | |
allow kernel recovery:fd { use }; | |
allow vendor_init rootfs:dir read; | |
') |