diff --git a/app.te b/app.te
index c4ebdf65f6335bbeb074b5256948e733f31ef0f7..56cecb52e344c08ce5035d28dff1ebb9c48220e2 100644
--- a/app.te
+++ b/app.te
@@ -279,11 +279,12 @@ neverallow appdomain dev_type:blk_file { read write };
 # Access to any of the following character devices.
 neverallow appdomain {
     audio_device
-    video_device
+    camera_device
     dm_device
-    radio_device
     gps_device
+    radio_device
     rpmsg_device
+    video_device
 }:chr_file { read write };
 
 # Note: Try expanding list of app domains in the future.
diff --git a/device.te b/device.te
index 0fc90c51db6516222c1cb6ebf7f77b5dd61f3417..06006b26dde849471af13933d84178a4ce6972a3 100644
--- a/device.te
+++ b/device.te
@@ -6,6 +6,7 @@ type ashmem_device, dev_type, mlstrustedobject;
 type audio_device, dev_type;
 type binder_device, dev_type, mlstrustedobject;
 type block_device, dev_type;
+type camera_device, dev_type;
 type dm_device, dev_type;
 type loop_device, dev_type;
 type pmsg_device, dev_type, mlstrustedobject;