diff --git a/public/hal_codec2.te b/public/hal_codec2.te
index f05e00a61..472d8943c 100644
--- a/public/hal_codec2.te
+++ b/public/hal_codec2.te
@@ -26,3 +26,7 @@ allow hal_codec2_server bufferhubd:fd use;
 
 allow hal_codec2_client ion_device:chr_file r_file_perms;
 
+# codec2 aidl graphic buffer allocation waitable object
+allow hal_codec2_server su:fifo_file read;
+allow hal_codec2_server mediaserver:fifo_file read;
+allow hal_codec2_server untrusted_app:fifo_file read;