diff --git a/nfc.te b/nfc.te
index 5b7f4b9f08dfb7c589967626fb0e5e341f28c6d0..05dabaa56d09185ce59cdd5705b2cbf18133fc71 100644
--- a/nfc.te
+++ b/nfc.te
@@ -4,6 +4,9 @@ app_domain(nfc)
 net_domain(nfc)
 binder_service(nfc)
 
+# hwbinder access
+hwbinder_use(nfc)
+
 # Set NFC properties
 set_prop(nfc, nfc_prop)
 
diff --git a/te_macros b/te_macros
index 1e70c4ceda8b7645840b90c21335ee463b88bc65..f22e00951957bee3fcbd111b41bf690e56cf1fc8 100644
--- a/te_macros
+++ b/te_macros
@@ -186,6 +186,20 @@ allow servicemanager $1:process getattr;
 # all domains in domain.te.
 ')
 
+#####################################
+# hwbinder_use(domain)
+# Allow domain to use HwBinder IPC.
+define(`hwbinder_use', `
+# Call the hwservicemanager and transfer references to it.
+allow $1 hwservicemanager:binder { call transfer };
+# hwservicemanager performs getpidcon on clients.
+allow hwservicemanager $1:dir search;
+allow hwservicemanager $1:file { read open };
+allow hwservicemanager $1:process getattr;
+# rw access to /dev/hwbinder and /dev/ashmem is presently granted to
+# all domains in domain.te.
+')
+
 #####################################
 # binder_call(clientdomain, serverdomain)
 # Allow clientdomain to perform binder IPC to serverdomain.