1 recovery_only(` 2 allow shell tmpfs:file r_file_perms; 3 allow shell sysfs:file r_file_perms; 4 ') 5