diff --git a/vold.te b/vold.te
index b76be767e6acde550d68facf35ce2cd43ca9e38c..350f6300908e400e973b38417b65a18e071b4eee 100644
--- a/vold.te
+++ b/vold.te
@@ -84,3 +84,7 @@ allow vold self:capability2 block_suspend;
 # talk to batteryservice
 binder_use(vold)
 binder_call(vold, healthd)
+
+# talk to keymaster
+allow vold tee_device:chr_file rw_file_perms;
+