diff --git a/sepolicy/vendor/hal_bootctl.te b/sepolicy/vendor/hal_bootctl.te
new file mode 100644
index 0000000..5b16097
--- /dev/null
+++ b/sepolicy/vendor/hal_bootctl.te
@@ -0,0 +1 @@
+allow hal_bootctl vendor_modem_efs_partition_device:blk_file getattr;
diff --git a/sepolicy/vendor/update_engine_common.te b/sepolicy/vendor/update_engine_common.te
new file mode 100644
index 0000000..bde8371
--- /dev/null
+++ b/sepolicy/vendor/update_engine_common.te
@@ -0,0 +1 @@
+allow update_engine_common vendor_modem_efs_partition_device:blk_file rw_file_perms;