sepolicy: Grant neccesary ioctls to recovery for external sd

avc: denied  { ioctl } for  pid=362 comm="recovery" path="/dev/block/volmgr/disk:179_0" dev="tmpfs" ino=7759 ioctlcmd=0x301 scontext=u:r:recovery:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0
avc: denied  { ioctl } for  pid=362 comm="recovery" path="/dev/block/volmgr/disk:179_0" dev="tmpfs" ino=7759 ioctlcmd=0x1260 scontext=u:r:recovery:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0

Change-Id: I143cfce81024ee3b8bd6edbb75b84f78c5688c21
diff --git a/common/private/recovery.te b/common/private/recovery.te
index 1b5bd9b..5246c15 100644
--- a/common/private/recovery.te
+++ b/common/private/recovery.te
@@ -15,6 +15,7 @@
 allow recovery rootfs:file { create_file_perms link };
 allow recovery media_rw_data_file:dir r_dir_perms;
 allow recovery sysfs_perdev_minors:file r_file_perms;
+allowxperm recovery block_device:blk_file ioctl { HDIO_GETGEO BLKGETSIZE };
 
 # Read fbe encryption info
 r_dir_file(recovery, unencrypted_data_file)