etc/init.recovery.service22.rc

on boot

# For starting recovery on 5.0 and newer
service recovery /system/bin/recovery
    seclabel u:r:recovery:s0

on early-init
    write /sys/fs/selinux/enforce 0