diff --git a/public/recovery.te b/public/recovery.te
index 187251a4f83a8e4d146a0f7a78eea0f29b662462..5f7a4751648ce0c26c5abb7f9baee76b030177e4 100644
--- a/public/recovery.te
+++ b/public/recovery.te
@@ -134,6 +134,8 @@ recovery_only(`
   # This line seems suspect, as it should not really need to
   # set scheduling parameters for a kernel domain task.
   allow recovery kernel:process setsched;
+
+  allow recovery proc_cmdline:file r_file_perms;
 ')
 
 ###