diff --git a/generic/vendor/common/device.te b/generic/vendor/common/device.te
index 8fb7d244..575ee95a 100644
--- a/generic/vendor/common/device.te
+++ b/generic/vendor/common/device.te
@@ -60,3 +60,4 @@ type synx_device, dev_type;
 type wlan_device, dev_type;
 type xbl_block_device, dev_type;
 type uefi_block_device, dev_type;
+type qce_device, dev_type;
\ No newline at end of file
diff --git a/generic/vendor/common/file_contexts b/generic/vendor/common/file_contexts
index dd5a88f7..5b6bde52 100644
--- a/generic/vendor/common/file_contexts
+++ b/generic/vendor/common/file_contexts
@@ -93,6 +93,7 @@
 /dev/socket/qmux_radio(/.*)?                    u:object_r:qmuxd_socket:s0
 /data/vendor/modem_config(/.*)?                 u:object_r:vendor_mbn_data_file:s0
 /dev/socket/qdcmsocket                          u:object_r:qdcmsocket_socket:s0
+/dev/qce                                        u:object_r:qce_device:s0
 
 # Block device holding the GPT, where the A/B attributes are stored.
 /dev/block/sda                                  u:object_r:gpt_block_device:s0
diff --git a/generic/vendor/common/hal_drm_widevine.te b/generic/vendor/common/hal_drm_widevine.te
index 04c71e06..b7ffde00 100644
--- a/generic/vendor/common/hal_drm_widevine.te
+++ b/generic/vendor/common/hal_drm_widevine.te
@@ -34,6 +34,7 @@ init_daemon_domain(hal_drm_widevine)
 
 allow hal_drm_widevine mediacodec:fd use;
 allow hal_drm_widevine { appdomain -isolated_app }:fd use;
+allow hal_drm_widevine qce_device:chr_file rw_file_perms;
 
 # The QTI DRM-HAL implementation uses a vendor-binder service provided
 # by the HWC HAL.