Merge "Allow recovery to read /proc/cmdline"

am: c9599b34

Change-Id: I403a945bcd0c8cb4892b11d1a817511f77e459e0

public/recovery.te

@@ -134,6 +134,8 @@ recovery_only(`
   # This line seems suspect, as it should not really need to
   # set scheduling parameters for a kernel domain task.
   allow recovery kernel:process setsched;
+
+  allow recovery proc_cmdline:file r_file_perms;
 ')
 
 ###