diff --git a/domain.te b/domain.te
index d86ac0cc2a485cf335d313894353d1b7a76935da..9e3a56806b3e753278c7bb49123d5ab02052001c 100644
--- a/domain.te
+++ b/domain.te
@@ -194,7 +194,6 @@ neverallow {
   -init
   -ueventd
   -vold
-  -recovery
 } self:capability mknod;
 
 # Limit raw I/O to these whitelisted domains.