sepolicy: Allow recovery to read to all sdcard filesystems
avc: denied { open } for pid=355 comm="recovery" path="/storage/FB77-9A59" dev="mmcblk0p1" ino=1 scontext=u:r:recovery:s0 tcontext=u:object_r:exfat:s0 tclass=dir permissive=0
Change-Id: If991762285e348c1911daf2c80aa028613ae6f54
diff --git a/common/private/recovery.te b/common/private/recovery.te
index 5246c15..cd1649a 100644
--- a/common/private/recovery.te
+++ b/common/private/recovery.te
@@ -4,6 +4,7 @@
')
# Volume manager
+r_dir_file(recovery, sdcard_type)
allow recovery block_device:dir create_dir_perms;
allow recovery block_device:blk_file { create unlink rw_file_perms };
allow recovery self:capability { mknod fsetid };