diff --git a/sepolicy/private/recovery.te b/sepolicy/private/recovery.te
new file mode 100644
index 0000000..251d342
--- /dev/null
+++ b/sepolicy/private/recovery.te
@@ -0,0 +1,4 @@
+# Set recovery to permissive
+recovery_only(`
+    permissive recovery;
+')