diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts
index 8a3fe65..63b2d58 100644
--- a/sepolicy/vendor/file_contexts
+++ b/sepolicy/vendor/file_contexts
@@ -43,6 +43,9 @@
 /(mnt/vendor/persist|persist)/chargeonly(/.*)?          u:object_r:persist_chargeonly_file:s0
 /(vendor|system/vendor)/bin/charge_only_mode            u:object_r:charge_only_exec:s0
 
+# DRI
+/dev/dri/card[0-4]              u:object_r:graphics_device:s0
+
 # Fingerprint
 /(mnt/vendor/persist|persist)/egis(/.*)?                u:object_r:vendor_persist_egis_file:s0
 /(mnt/vendor/persist|persist)/fps(/.*)?                 u:object_r:vendor_persist_fps_file:s0
diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te
index 07cb76d..b024d59 100644
--- a/sepolicy/vendor/hal_fingerprint_default.te
+++ b/sepolicy/vendor/hal_fingerprint_default.te
@@ -3,6 +3,7 @@ allow hal_fingerprint_default {
   egis_device
   goodix_device
   tee_device
+  graphics_device
 }: chr_file rw_file_perms;
 
 allow hal_fingerprint_default self:binder { call transfer };