diff --git a/private/file_contexts b/private/file_contexts
index 9236bfe83ebd100a324cf62c33fd9444dbd297f8..aa495ec567d9966d75c87b6e69d79a54d90d96da 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -244,6 +244,7 @@
 /system/bin/hw/android\.hardware\.bluetooth@1\.0-service      u:object_r:hal_bluetooth_default_exec:s0
 /system/bin/hw/android\.hardware\.boot@1\.0-service           u:object_r:hal_boot_exec:s0
 /system/bin/hw/android\.hardware\.camera\.provider@2\.4-service          u:object_r:hal_camera_default_exec:s0
+/system/bin/hw/android\.hardware\.configstore@1\.0-service    u:object_r:hal_configstore_default_exec:s0
 /system/bin/hw/android\.hardware\.contexthub@1\.0-service     u:object_r:hal_contexthub_default_exec:s0
 /system/bin/hw/android\.hardware\.drm@1\.0-service            u:object_r:hal_drm_default_exec:s0
 /system/bin/hw/android\.hardware\.dumpstate@1\.0-service      u:object_r:hal_dumpstate_default_exec:s0
diff --git a/private/hal_configstore_default.te b/private/hal_configstore_default.te
new file mode 100644
index 0000000000000000000000000000000000000000..b3ca6c2ffc0dc306307d8345c1b0b44ff9dfbe98
--- /dev/null
+++ b/private/hal_configstore_default.te
@@ -0,0 +1,5 @@
+type hal_configstore_default, domain;
+hal_impl_domain(hal_configstore_default, hal_configstore)
+
+type hal_configstore_default_exec, exec_type, file_type;
+init_daemon_domain(hal_configstore_default)
diff --git a/public/attributes b/public/attributes
index 368af4f2952d08f13741040ace2cd16931d90e1f..75db022ccb93c86e7867cc029c0ae277780cbbc0 100644
--- a/public/attributes
+++ b/public/attributes
@@ -121,6 +121,7 @@ attribute haldomain;
 attribute hal_audio;
 attribute hal_bluetooth;
 attribute hal_camera;
+attribute hal_configstore;
 attribute hal_contexthub;
 attribute hal_drm;
 attribute hal_dumpstate;
diff --git a/public/surfaceflinger.te b/public/surfaceflinger.te
index d09a350f7a4201128c03730f9e3b80125ff9501e..3bdc97fdab2d8ad2a1c9b8a2c5c5bc222e0f4d51 100644
--- a/public/surfaceflinger.te
+++ b/public/surfaceflinger.te
@@ -10,6 +10,7 @@ read_runtime_log_tags(surfaceflinger)
 hwbinder_use(surfaceflinger)
 binder_call(surfaceflinger, hal_graphics_allocator)
 binder_call(surfaceflinger, hal_graphics_composer)
+binder_call(surfaceflinger, hal_configstore)
 
 # Perform Binder IPC.
 binder_use(surfaceflinger)