recovery_only(`
#allow fastbootd self:capability { dac_read_search };
allow fastbootd sysfs:dir r_dir_perms;
allow fastbootd sysfs_batteryinfo:dir r_dir_perms;
allow fastbootd vbmeta_block_device:blk_file rw_file_perms;
')