# Purpose : Nand device policy allow recovery mtd_device:dir search; allow recovery mtd_device:chr_file { read write open ioctl getattr }; allow recovery self:capability sys_resource; # For boot type allow recovery sysfs_boot_type:file { read open };