#============= recovery ==============
allow recovery devpts:chr_file { open read write };
allow recovery kmsg_device:chr_file { open read write };
allow recovery boottime_prop:file { getattr open };
#allow recovery firstboot_prop:file { getattr open };
allow recovery overlay_prop:file { getattr open };
allow recovery persistent_properties_ready_prop:file { getattr open };
allow recovery wifi_prop:file getattr;
allow recovery device_logging_prop:file { getattr open };
allow recovery mmc_prop:file { getattr open };
allow recovery net_dns_prop:file open;
#allow recovery netd_stable_secret_prop:file { getattr open };
allow recovery safemode_prop:file { getattr open };
allow recovery wifi_prop:file open;
allow recovery bluetooth_prop:file { getattr open };
allow recovery dumpstate_options_prop:file { getattr open };
allow recovery logpersistd_logging_prop:file { getattr open };
allow recovery net_dns_prop:file getattr;
allow recovery proc_drop_caches:file read;
#allow recovery firstboot_prop:file getattr;
#allow recovery netd_stable_secret_prop:file { getattr open };
allow recovery proc_drop_caches:file getattr;
allow recovery vfat:dir { open read search };
allow recovery vfat:file { getattr open read };
#allow recovery disp_prop:file { getattr open };
#allow recovery hdmi_prop:file { getattr open };
allow recovery media_rw_data_file:dir {search open};
allow recovery media_rw_data_file:file {read open getattr};