# Recovery SELinux Policy
# Allow recovery to access app data files for backup operations

allow recovery app_data_file:dir { getattr read open search };
allow recovery app_data_file:file { getattr read open };
allow recovery media_rw_data_file:dir { getattr read open search };
allow recovery media_rw_data_file:file { getattr read open };

# Allow recovery to access system app data
allow recovery system_app_data_file:dir { getattr read open search };
allow recovery system_app_data_file:file { getattr read open };

# Allow recovery to access platform app data
allow recovery platform_app_data_file:dir { getattr read open search };
allow recovery platform_app_data_file:file { getattr read open };

# Allow recovery to access user data directories
allow recovery system_data_file:dir { getattr read open search };
allow recovery system_data_file:file { getattr read open };

# Allow recovery to create backup files
allow recovery media_rw_data_file:file { create write };
allow recovery sdcard_type:dir { create write add_name };
allow recovery sdcard_type:file { create write };