Merge "recovery: fix denials during factory reset"

public/recovery.te

@@ -52,6 +52,9 @@ recovery_only(`
   # Write to /proc/sys/vm/drop_caches
   allow recovery proc_drop_caches:file w_file_perms;
 
+  # Read /proc/swaps
+  allow recovery proc_swaps:file r_file_perms;
+
   # Read kernel config through libvintf for OTA matching
   allow recovery config_gz:file { open read getattr };
 
@@ -66,6 +69,9 @@ recovery_only(`
 
   allow recovery sysfs_batteryinfo:file r_file_perms;
 
+  # Read /sysfs/fs/ext4/features
+  r_dir_file(recovery, sysfs_fs_ext4_features)
+
   # Read from /sys/class/leds/lcd-backlight/max_brightness and write to /s/c/l/l/brightness to
   # control backlight brightness.
   allow recovery sysfs_leds:dir r_dir_perms;