diff --git a/legacy/vendor/common/qseecomd.te b/legacy/vendor/common/qseecomd.te
index 8023f67c..b4da1619 100644
--- a/legacy/vendor/common/qseecomd.te
+++ b/legacy/vendor/common/qseecomd.te
@@ -72,7 +72,7 @@ allow tee time_daemon:unix_stream_socket connectto;
 
 # allow tee access for secure UI to work
 allow tee graphics_device:dir r_dir_perms;
-allow tee graphics_device:chr_file r_file_perms;
+allow tee graphics_device:chr_file rw_file_perms;
 
 #allow tee access for secure touch to work
 allow tee sysfs_securetouch:file rw_file_perms;