sepolicy: Additional filesystem perms for recovery

Change-Id: I66c785de7256ea64302a258af7c33cb717530343
diff --git a/sepolicy/vold.te b/sepolicy/vold.te
index b54b6e9..acdc7af 100644
--- a/sepolicy/vold.te
+++ b/sepolicy/vold.te
@@ -8,3 +8,8 @@
 
 # NTFS-3g wants to drop permission
 allow vold self:capability { setgid setuid };
+
+# Vold can also run as minivold in the rootfs
+recovery_only(`
+  allow vold rootfs:dir { add_name write };
+')