sepolicy: allow recovery read access to /data/media/ files and dirs
Change-Id: I41173d72e86f9cf4d79f7c46166eeb71dc19d2f4
diff --git a/sepolicy/recovery.te b/sepolicy/recovery.te
index 9d17beb..6110f9a 100644
--- a/sepolicy/recovery.te
+++ b/sepolicy/recovery.te
@@ -17,6 +17,10 @@
allow recovery rootfs:file create_file_perms;
allow recovery rootfs:dir { write add_name };
+# Read /data/media files and directories
+allow recovery media_rw_data_file:dir r_dir_perms;
+allow recovery media_rw_data_file:file r_file_perms;
+
# Control properties
allow recovery recovery_prop:property_service set;