diff --git a/include/private/android_filesystem_config.h b/include/private/android_filesystem_config.h
index 53619ac168a664224c6f3f1d416bfa351b04f1ef..e3568ae04838c5517ab4d53e6677d66880fbe7cd 100644
--- a/include/private/android_filesystem_config.h
+++ b/include/private/android_filesystem_config.h
@@ -247,6 +247,7 @@ static const struct fs_path_config android_files[] = {
     /* the following files have enhanced capabilities and ARE included in user builds. */
     { 00750, AID_ROOT,      AID_SHELL,     (1 << CAP_SETUID) | (1 << CAP_SETGID), "system/bin/run-as" },
 
+    { 00750, AID_ROOT,      AID_ROOT,      0, "system/bin/uncrypt" },
     { 00755, AID_ROOT,      AID_SHELL,     0, "system/bin/*" },
     { 00755, AID_ROOT,      AID_ROOT,      0, "system/lib/valgrind/*" },
     { 00755, AID_ROOT,      AID_SHELL,     0, "system/xbin/*" },
diff --git a/init/property_service.c b/init/property_service.c
index 1b9327ce371288032a22aed5025a8af3cdd90ad6..6cdb9574e74507c33a6da7e86fb73164dd41a679 100644
--- a/init/property_service.c
+++ b/init/property_service.c
@@ -110,6 +110,7 @@ struct {
 } control_perms[] = {
     { "dumpstate",AID_SHELL, AID_LOG },
     { "ril-daemon",AID_RADIO, AID_RADIO },
+    { "pre-recovery", AID_SYSTEM, AID_SYSTEM },
      {NULL, 0, 0 }
 };
 
diff --git a/rootdir/init.rc b/rootdir/init.rc
index 7ee1be9019a86dc1d81790a8c16ebe68a609514a..324ac373b98b9215075eb8b261a3bb58aa17b5f4 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -577,3 +577,8 @@ service mdnsd /system/bin/mdnsd
     socket mdnsd stream 0660 mdnsr inet
     disabled
     oneshot
+
+service pre-recovery /system/bin/uncrypt
+    class main
+    disabled
+    oneshot