| recovery_only(` | |
| allow fastbootd ab_block_device:blk_file { w_file_perms ioctl }; | |
| allow fastbootd system_block_device:blk_file r_file_perms; | |
| allow fastbootd boot_block_device:blk_file ioctl; | |
| allow fastbootd devinfo_block_device:blk_file r_file_perms; | |
| allow fastbootd sysfs_leds:file w_file_perms; | |
| allow fastbootd citadel_device:chr_file rw_file_perms; | |
| ') | |