1recovery_only(`
2  # recovery uses cache
3  allow recovery cache_file:dir mounton;
4  # look in /dev/dri/
5  allow recovery gpu_device:chr_file rw_file_perms;
6  allow recovery host1x_device:chr_file rw_file_perms;
7
8  set_prop(recovery, ffs_prop)
9
10  # for operations in recovery/updater/flash_mtd.c
11  allow recovery mtd_device:dir search;
12  allow recovery mtd_device:chr_file rw_file_perms;
13
14  # for operations in recovery/update/flash_ec.c
15  allow recovery cros_ec_device:chr_file rw_file_perms;
16')
17