diff --git a/public/recovery.te b/public/recovery.te
index 5f7a4751648ce0c26c5abb7f9baee76b030177e4..ee5f12576b884a3005171466c82bfd42692133a6 100644
--- a/public/recovery.te
+++ b/public/recovery.te
@@ -55,10 +55,11 @@ recovery_only(`
   # Read kernel config through libvintf for OTA matching
   allow recovery config_gz:file { open read getattr };
 
-  # Write to /sys/class/android_usb/android0/enable.
-  # TODO: create more specific label?
   r_dir_file(recovery, sysfs)
-  allow recovery sysfs:file w_file_perms;
+
+  # Write to /sys/class/android_usb/android0/enable.
+  r_dir_file(recovery, sysfs_android_usb)
+  allow recovery sysfs_android_usb:file w_file_perms;
 
   # Write to /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq.
   allow recovery sysfs_devices_system_cpu:file w_file_perms;