diff --git a/public/recovery.te b/public/recovery.te
index 187251a..5f7a475 100644
--- a/public/recovery.te
+++ b/public/recovery.te
@@ -134,6 +134,8 @@
   # This line seems suspect, as it should not really need to
   # set scheduling parameters for a kernel domain task.
   allow recovery kernel:process setsched;
+
+  allow recovery proc_cmdline:file r_file_perms;
 ')
 
 ###