diff --git a/domain.te b/domain.te
index 34faafda83be0ab917f819aa1bcde7181e3fd907..eea677ef15d1f8ba8e2520a26f6fd18a1de2964c 100644
--- a/domain.te
+++ b/domain.te
@@ -288,9 +288,12 @@ neverallow {
 
 neverallow { domain userdebug_or_eng(`-shell') } nativetest_data_file:file no_x_file_perms;
 
-# Only the init property service should write to /data/property.
+# Only the init property service should write to /data/property and /dev/__properties__
 neverallow { domain -init } property_data_file:dir no_w_dir_perms;
 neverallow { domain -init } property_data_file:file no_w_file_perms;
+neverallow { domain -init } property_type:file no_w_file_perms;
+neverallow { domain -init } properties_device:file no_w_file_perms;
+neverallow { domain -init } properties_serial:file no_w_file_perms;
 
 # Only recovery should be doing writes to /system
 neverallow { domain -recovery } { system_file exec_type }:dir_file_class_set