diff --git a/non_plat/fastbootd.te b/non_plat/fastbootd.te
new file mode 100644
index 0000000..c9ef358
--- /dev/null
+++ b/non_plat/fastbootd.te
@@ -0,0 +1,18 @@
+# fastbootd (used in recovery init.rc for /sbin/fastbootd)
+
+
+allow fastbootd {
+    cache_block_device
+    logo_block_device
+    para_block_device
+  }:blk_file { rw_file_perms };
+
+allowxperm fastbootd {
+    cache_block_device
+    logo_block_device
+    para_block_device
+  }:blk_file ioctl {
+      BLKSECDISCARD
+      BLKDISCARD
+  };
+