sepolicy: recovery: allow reading fbe key version

 * We use this to detect fbe encryption

Change-Id: I29355790068b78437aba11390bdf3efd22e229bc
diff --git a/common/private/recovery.te b/common/private/recovery.te
index 7a5c16c..f7dbcd5 100644
--- a/common/private/recovery.te
+++ b/common/private/recovery.te
@@ -44,4 +44,7 @@
 
 # Read battery percentage
 allow recovery sysfs_batteryinfo:dir search;
+
+# Read fbe encryption info
+r_dir_file(recovery, unencrypted_data_file)
 ')