diff --git a/dauntless/sepolicy/fastbootd.te b/dauntless/sepolicy/fastbootd.te
new file mode 100644
index 0000000..c8c0e29
--- /dev/null
+++ b/dauntless/sepolicy/fastbootd.te
@@ -0,0 +1,3 @@
+recovery_only(`
+  allow fastbootd citadel_device:chr_file rw_file_perms;
+')
diff --git a/dauntless/sepolicy/recovery.te b/dauntless/sepolicy/recovery.te
new file mode 100644
index 0000000..c68244f
--- /dev/null
+++ b/dauntless/sepolicy/recovery.te
@@ -0,0 +1,3 @@
+recovery_only(`
+  allow recovery citadel_device:chr_file rw_file_perms;
+')