1recovery_only(`
2allow shell tmpfs:file r_file_perms;
3allow shell sysfs:file r_file_perms;
4')
5