# recovery console (used in recovery init.rc for /sbin/recovery) # Declare the domain unconditionally so we can always reference it # in neverallow rules. type recovery, domain; # system/sepolicy/public is for vendor-facing type and attribute definitions. # DO NOT ADD allow, neverallow, or dontaudit statements here. # Instead, add such policy rules to system/sepolicy/private/*.te.