diff --git a/priv_app.te b/priv_app.te
index 275020f128dd0bed80dee7f133306ce4c9dcbe36..79e9e96e98646cba4d8eec078f0da9d89836ff7b 100644
--- a/priv_app.te
+++ b/priv_app.te
@@ -31,6 +31,7 @@ allow priv_app surfaceflinger_service:service_manager find;
 allow priv_app app_api_service:service_manager find;
 allow priv_app system_api_service:service_manager find;
 allow priv_app persistent_data_block_service:service_manager find;
+allow priv_app recovery_service:service_manager find;
 
 # Traverse into /mnt/media_rw for bypassing FUSE daemon
 # TODO: narrow this to just MediaProvider
diff --git a/service.te b/service.te
index ae7dcd7c66c42c80fb6be6a607ee46652d7c2897..63636f65392c569af96a07d53c4cdf52a00d86d9 100644
--- a/service.te
+++ b/service.te
@@ -82,6 +82,7 @@ type power_service, app_api_service, system_server_service, service_manager_type
 type print_service, app_api_service, system_server_service, service_manager_type;
 type processinfo_service, system_server_service, service_manager_type;
 type procstats_service, app_api_service, system_server_service, service_manager_type;
+type recovery_service, system_server_service, service_manager_type;
 type registry_service, app_api_service, system_server_service, service_manager_type;
 type restrictions_service, app_api_service, system_server_service, service_manager_type;
 type rttmanager_service, app_api_service, system_server_service, service_manager_type;
diff --git a/service_contexts b/service_contexts
index 1d18a603adf0f3e528006bfbb2bcbd97e39c2412..e23f72bb3b29bbf91d7c855174c4fc09cef007ca 100644
--- a/service_contexts
+++ b/service_contexts
@@ -102,6 +102,7 @@ procstats                                 u:object_r:procstats_service:s0
 radio.phonesubinfo                        u:object_r:radio_service:s0
 radio.phone                               u:object_r:radio_service:s0
 radio.sms                                 u:object_r:radio_service:s0
+recovery                                  u:object_r:recovery_service:s0
 restrictions                              u:object_r:restrictions_service:s0
 rttmanager                                u:object_r:rttmanager_service:s0
 samplingprofiler                          u:object_r:samplingprofiler_service:s0