allow recovery devpts:chr_file { open read write };
|
allow recovery kmsg_device:chr_file { open read write };
|
allow recovery boottime_prop:file { getattr open };
|
allow recovery overlay_prop:file { getattr open };
|
allow recovery persistent_properties_ready_prop:file { getattr open };
|
allow recovery wifi_prop:file getattr;
|
allow recovery device_logging_prop:file { getattr open };
|
allow recovery mmc_prop:file { getattr open };
|
allow recovery net_dns_prop:file open;
|
allow recovery safemode_prop:file { getattr open };
|
allow recovery wifi_prop:file open;
|
allow recovery bluetooth_prop:file { getattr open };
|
allow recovery dumpstate_options_prop:file { getattr open };
|
allow recovery logpersistd_logging_prop:file { getattr open };
|
allow recovery net_dns_prop:file getattr;
|
allow recovery proc_drop_caches:file read;
|
allow recovery proc_drop_caches:file getattr;
|
allow recovery proc_filesystems:file r_file_perms;
|
allow recovery vfat:dir { open read search };
|
allow recovery vfat:file { getattr open read };
|
allow recovery media_rw_data_file:dir r_dir_perms;
|
allow recovery media_rw_data_file:file r_file_perms;
|
allow recovery system_data_file:dir r_dir_perms;
|
allow recovery system_data_file:file r_file_perms;
|
allow recovery cache_file:lnk_file {open read write create};
|
|
allow recovery sysfs_dm:dir r_dir_perms;
|
allow recovery sysfs_dm:file r_file_perms;
|
allow recovery tmpfs:lnk_file { getattr read };
|
|
dontaudit recovery self:global_capability_class_set fsetid;
|
|
allow recovery apexd_prop:file { getattr open };
|
allow recovery block_device:blk_file ioctl;
|
allow recovery kernel:system module_request;
|
allowxperm recovery block_device:blk_file ioctl { NAND_BLKBURNBOOT0 NAND_BLKBURNUBOOT };
|
