1recovery_only(` 2 allow recovery sysfs_nanoapp_cmd:dir search; 3 allow recovery sysfs_nanoapp_cmd:file { open write }; 4') 5