diff --git a/sepolicy/recovery.te b/sepolicy/recovery.te
index 9d17beb..6110f9a 100644
--- a/sepolicy/recovery.te
+++ b/sepolicy/recovery.te
@@ -17,6 +17,10 @@
 allow recovery rootfs:file create_file_perms;
 allow recovery rootfs:dir { write add_name };
 
+# Read /data/media files and directories
+allow recovery media_rw_data_file:dir r_dir_perms;
+allow recovery media_rw_data_file:file r_file_perms;
+
 # Control properties
 allow recovery recovery_prop:property_service set;