DivestOS/Misc/audit2allow-mako.txt

#============= install_recovery ==============
allow install_recovery unlabeled:dir { add_name remove_name write };
allow install_recovery unlabeled:file { create open setattr unlink write };

#============= vold ==============
allow vold persist_file:dir { ioctl open read };