diff --git a/whitechapel/vendor/google/recovery.te b/whitechapel/vendor/google/recovery.te
new file mode 100644
index 00000000..6eb97aa3
--- /dev/null
+++ b/whitechapel/vendor/google/recovery.te
@@ -0,0 +1,3 @@
+recovery_only(`
+  allow recovery sysfs_ota:file rw_file_perms;
+')