diff --git a/vendor/hal_rebootescrow_default.te b/vendor/hal_rebootescrow_default.te
index c264e49d9..99faddeb2 100644
--- a/vendor/hal_rebootescrow_default.te
+++ b/vendor/hal_rebootescrow_default.te
@@ -3,3 +3,6 @@ hal_server_domain(hal_rebootescrow_default, hal_rebootescrow)
 
 type hal_rebootescrow_default_exec, exec_type, vendor_file_type, file_type;
 init_daemon_domain(hal_rebootescrow_default)
+
+type rebootescrow_device, dev_type;
+allow hal_rebootescrow_default rebootescrow_device:chr_file rw_file_perms;