diff --git a/tracking_denials/fastbootd.te b/tracking_denials/fastbootd.te
deleted file mode 100644
index 4428b68a..00000000
--- a/tracking_denials/fastbootd.te
+++ /dev/null
@@ -1,4 +0,0 @@
-# b/264489957
-userdebug_or_eng(`
-  permissive fastbootd;
-')
\ No newline at end of file
diff --git a/vendor/fastbootd.te b/vendor/fastbootd.te
new file mode 100644
index 00000000..c7f6a88d
--- /dev/null
+++ b/vendor/fastbootd.te
@@ -0,0 +1,6 @@
+recovery_only(`
+  allow fastbootd devinfo_block_device:blk_file rw_file_perms;
+  allow fastbootd sda_block_device:blk_file rw_file_perms;
+  allow fastbootd sysfs_ota:file rw_file_perms;
+  allow fastbootd st54spi_device:chr_file rw_file_perms;
+')