sepolicy: Allow recovery to set service.adb.root

* Permissive is no longer required

Change-Id: Ic4ffdc6a79d55855cd9e7ef0520d22d472358d06
diff --git a/common/private/recovery.te b/common/private/recovery.te
new file mode 100644
index 0000000..77e26ee
--- /dev/null
+++ b/common/private/recovery.te
@@ -0,0 +1,4 @@
+recovery_only(`
+# Enable adb root
+set_prop(recovery, shell_prop)
+')