1recovery_only(` 2 allow recovery citadel_device:chr_file rw_file_perms; 3 allow recovery sg_device:chr_file rw_file_perms; 4 allow recovery sysfs_scsi_devices_0000:dir r_dir_perms; 5') 6