am 51ad2ad3: am c2ba5ed9: recovery: start enforcing SELinux rules

* commit '51ad2ad3':
  recovery: start enforcing SELinux rules

recovery.te

@@ -8,7 +8,6 @@ type recovery, domain;
 # Otherwise recovery is only allowed the domain rules.
 recovery_only(`
   allow recovery rootfs:file { entrypoint execute };
-  permissive_or_unconfined(recovery)
 
   allow recovery self:capability { chown dac_override fowner fsetid setfcap setuid setgid sys_admin sys_tty_config };