diff --git a/file.te b/file.te
index 51684f3243af4274e11b55b618c95414ca630833..5b71f8bc9e781f42e38124b06a4699e1b57273dd 100644
--- a/file.te
+++ b/file.te
@@ -51,6 +51,7 @@ type gps_data_file, file_type, data_file_type;
 # /data/misc subdirectories
 type audio_firmware_file, file_type, data_file_type;
 type bluetooth_data_file, file_type, data_file_type;
+type media_data_file, file_type, data_file_type;
 type keystore_data_file, file_type, data_file_type;
 type vpn_data_file, file_type, data_file_type;
 type systemkeys_data_file, file_type, data_file_type;
diff --git a/file_contexts b/file_contexts
index 83226aec49442034e43024107ddca903733aaba8..d8315a1f69a44127bbdfd974f97135adc25770e1 100644
--- a/file_contexts
+++ b/file_contexts
@@ -170,6 +170,7 @@
 /data/misc/bluetooth(/.*)?	u:object_r:bluetooth_data_file:s0
 /data/misc/bluedroid(/.*)?	u:object_r:bluetooth_data_file:s0
 /data/misc/keystore(/.*)?	u:object_r:keystore_data_file:s0
+/data/misc/media(/.*)?		u:object_r:media_data_file:s0
 /data/misc/vpn(/.*)?		u:object_r:vpn_data_file:s0
 /data/misc/systemkeys(/.*)?	u:object_r:systemkeys_data_file:s0
 /data/misc/wifi(/.*)?		u:object_r:wifi_data_file:s0
diff --git a/mediaserver.te b/mediaserver.te
index 6904f821cf16073ac2596768c5af60d974961925..51ae726e534d4b6361d523b0528e23607060bf25 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -18,6 +18,8 @@ binder_service(mediaserver)
 
 allow mediaserver self:process execmem;
 allow mediaserver kernel:system module_request;
+allow mediaserver media_data_file:dir rw_dir_perms;
+allow mediaserver media_data_file:file create_file_perms;
 allow mediaserver app_data_file:dir search;
 allow mediaserver app_data_file:file rw_file_perms;
 allow mediaserver platform_app_data_file:file { getattr read };