diff --git a/public/hal_wifi.te b/public/hal_wifi.te
index a883d790771f961600549f3b44ca04ac0364ca5b..7c5600b5dd55f0ef4556dde0b743529f3d126abe 100644
--- a/public/hal_wifi.te
+++ b/public/hal_wifi.te
@@ -20,3 +20,5 @@ allow hal_wifi self:capability { net_admin net_raw };
 allow hal_wifi self:netlink_socket create_socket_perms_no_ioctl;
 # newer kernels (e.g. 4.4 but not 4.1) have a new class for sockets
 allow hal_wifi self:netlink_generic_socket create_socket_perms_no_ioctl;
+# hal_wifi writes firmware paths to this file.
+allow hal_wifi sysfs_wlan_fwpath:file { w_file_perms };