Merge "Allow recovery to read /proc/cmdline" am: c9599b34

am: 820f59a7

Change-Id: I9da2b7b2ede1e79e281f6ce6670d32bad1f101da

public/recovery.te

@@ -134,6 +134,8 @@ recovery_only(`
   # This line seems suspect, as it should not really need to
   # set scheduling parameters for a kernel domain task.
   allow recovery kernel:process setsched;
+
+  allow recovery proc_cmdline:file r_file_perms;
 ')
 
 ###