sepolicy/twrp.te - android_bootable_recovery - Gitiles

 recovery_only(`
   permissive recovery;
   permissive init;
   permissive logd;
   permissive adbd;
   allow kernel tmpfs:file { read };
   allow kernel recovery:fd { use };
 ')
	recovery_only(`
	permissive recovery;
	permissive init;
	permissive logd;
	permissive adbd;
	allow kernel tmpfs:file { read };
	allow kernel recovery:fd { use };
	')