diff --git a/public/hal_health.te b/public/hal_health.te
index c19c5f1d78f8e931b1c02d8b4294d2936c43997a..068f23bf798471c26b4730d75886dd939d5d2e77 100644
--- a/public/hal_health.te
+++ b/public/hal_health.te
@@ -9,3 +9,19 @@ allow hal_health_client hal_health_hwservice:hwservice_manager find;
 # /{system,vendor,odm}/lib[64]/hw/ in order
 # to be able to open the hal implementation .so files
 r_dir_file(hal_health, system_file)
+
+# Common rules for a health service.
+
+# Allow to listen to uevents for updates
+allow hal_health_server self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
+
+# Allow to read /sys/class/power_supply directory
+allow hal_health_server sysfs:dir r_dir_perms;
+
+# Allow to read files under /sys/class/power_supply. Implementations typically have symlinks
+# to vendor specific files. Vendors should mark sysfs_batteryinfo on all files read by health
+# HAL service.
+r_dir_file(hal_health_server, sysfs_batteryinfo)
+
+# Allow to wake up to send periodic events
+wakelock_use(hal_health_server)