diff --git a/sepolicy/private/backuptool.te b/sepolicy/private/backuptool.te
index f5a9b2d..b670fb0 100644
--- a/sepolicy/private/backuptool.te
+++ b/sepolicy/private/backuptool.te
@@ -2,4 +2,8 @@
 
 permissive backuptool;
 
-neverallow { domain -update_engine } backuptool:process transition;
+neverallow {
+    domain
+    -recovery
+    -update_engine
+} backuptool:process transition;