diff --git a/universal7885-common/sepolicy/vendor/hal_drm_widevine.te b/universal7885-common/sepolicy/vendor/hal_drm_widevine.te
index 790a9e0..21f377d 100644
--- a/universal7885-common/sepolicy/vendor/hal_drm_widevine.te
+++ b/universal7885-common/sepolicy/vendor/hal_drm_widevine.te
@@ -22,4 +22,4 @@ allow hal_drm_widevine efs_file:dir search;
 
 allow hal_drm_widevine drm_device:chr_file { read write open ioctl };
 
-allow hal_drm_widevine tz_user_device:chr_file { read write open };
+allow hal_drm_widevine tz_user_device:chr_file { read write open ioctl };