sepolicy: recovery: allow reading fbe key version
* We use this to detect fbe encryption
Change-Id: I29355790068b78437aba11390bdf3efd22e229bc
diff --git a/common/private/recovery.te b/common/private/recovery.te
index 83ce43f..314d643 100644
--- a/common/private/recovery.te
+++ b/common/private/recovery.te
@@ -14,4 +14,7 @@
allow recovery rootfs:dir w_dir_perms;
allow recovery rootfs:file { create_file_perms link };
allow recovery media_rw_data_file:dir r_dir_perms;
+
+# Read fbe encryption info
+r_dir_file(recovery, unencrypted_data_file)
')