diff --git a/sepolicy/mac_permissions.xml b/sepolicy/mac_permissions.xml
index e91c6f41..184e3568 100644
--- a/sepolicy/mac_permissions.xml
+++ b/sepolicy/mac_permissions.xml
@@ -14,4 +14,11 @@
     <allow-all />
     <seinfo value="release" />
   </signer>
+
+  <!-- CMUpdater -->
+  <signer signature="@RELEASE" >
+    <package name="com.cyanogenmod.updater" >
+      <seinfo value="cmupdater" />
+    </package>
+  </signer>
 </policy>
diff --git a/sepolicy/seapp_contexts b/sepolicy/seapp_contexts
index bfad4181..06c96d4b 100644
--- a/sepolicy/seapp_contexts
+++ b/sepolicy/seapp_contexts
@@ -1,2 +1,3 @@
 user=_app seinfo=platform name=com.cyanogenmod.filemanager domain=untrusted_app type=app_data_file
 user=theme_man domain=system_app type=system_data_file
+user=_app seinfo=cmupdater name=com.cyanogenmod.updater domain=system_app type=system_app_data_file
diff --git a/sepolicy/uncrypt.te b/sepolicy/uncrypt.te
index 8fddf8ac..2e545a79 100644
--- a/sepolicy/uncrypt.te
+++ b/sepolicy/uncrypt.te
@@ -1 +1,3 @@
 r_dir_file(uncrypt, media_rw_data_file)
+allow uncrypt recovery_cache_file:dir create_dir_perms;
+allow uncrypt recovery_cache_file:file create_file_perms;