diff --git a/public/wpa.te b/public/wpa.te
index 863b6b9fbbec9defb1a19d2467f7d5a5aa4847e2..83276c80cc77541d9954afaaa42e91e52b2a3d0e 100644
--- a/public/wpa.te
+++ b/public/wpa.te
@@ -21,6 +21,9 @@ allow wpa wifi_data_file:dir create_dir_perms;
 allow wpa wifi_data_file:file create_file_perms;
 unix_socket_send(wpa, system_wpa, system_server)
 
+# Keystore access via binder.
+binder_use(wpa)
+
 # HIDL interface exposed by WPA.
 hwbinder_use(wpa)
 binder_call(wpa, wificond)