diff --git a/priv_app.te b/priv_app.te
index e300d45688388f301010d144125c228cb3bec36b..91462631e2629351fd60168b65170c6b0dd1d35e 100644
--- a/priv_app.te
+++ b/priv_app.te
@@ -27,6 +27,7 @@ allow priv_app surfaceflinger_service:service_manager find;
 allow priv_app app_api_service:service_manager find;
 allow priv_app system_api_service:service_manager find;
 allow priv_app persistent_data_block_service:service_manager find;
+allow priv_app recovery_service:service_manager find;
 
 # Traverse into /mnt/media_rw for bypassing FUSE daemon
 # TODO: narrow this to just MediaProvider
diff --git a/service.te b/service.te
index 70bb34c20774013c73c4464c5c12e19ebbc6e60f..695376cc703f343c3c6e2bc6c3a112a061f39bf3 100644
--- a/service.te
+++ b/service.te
@@ -75,6 +75,7 @@ type power_service, app_api_service, system_server_service, service_manager_type
 type print_service, app_api_service, system_server_service, service_manager_type;
 type processinfo_service, system_server_service, service_manager_type;
 type procstats_service, app_api_service, system_server_service, service_manager_type;
+type recovery_service, system_server_service, service_manager_type;
 type registry_service, app_api_service, system_server_service, service_manager_type;
 type restrictions_service, app_api_service, system_server_service, service_manager_type;
 type rttmanager_service, app_api_service, system_server_service, service_manager_type;
diff --git a/service_contexts b/service_contexts
index 5cab2d34d0229ed2525ac1828f9a08194a73e6f1..8ff12f81754b02e778b07981ea249335313b3418 100644
--- a/service_contexts
+++ b/service_contexts
@@ -96,6 +96,7 @@ procstats                                 u:object_r:procstats_service:s0
 radio.phonesubinfo                        u:object_r:radio_service:s0
 radio.phone                               u:object_r:radio_service:s0
 radio.sms                                 u:object_r:radio_service:s0
+recovery                                  u:object_r:recovery_service:s0
 restrictions                              u:object_r:restrictions_service:s0
 rttmanager                                u:object_r:rttmanager_service:s0
 samplingprofiler                          u:object_r:samplingprofiler_service:s0