diff --git a/public/su.te b/public/su.te
index 8cb386d4b8127cb67f0ac2ec17e770473a49e53d..f410c4d81ff75def4c1dada77fdf4b892a9afc60 100644
--- a/public/su.te
+++ b/public/su.te
@@ -10,6 +10,9 @@ userdebug_or_eng(`
   # Add su to various domains
   net_domain(su)
 
+  # grant su access to vndbinder
+  vndbinder_use(su)
+
   dontaudit su self:capability_class_set *;
   dontaudit su kernel:security *;
   dontaudit su kernel:system *;
@@ -34,6 +37,8 @@ userdebug_or_eng(`
   dontaudit su property_type:property_service *;
   dontaudit su property_type:file *;
   dontaudit su service_manager_type:service_manager *;
+  dontaudit su hwservice_manager_type:hwservice_manager *;
+  dontaudit su vndservice_manager_type:vndservice_manager *;
   dontaudit su servicemanager:service_manager list;
   dontaudit su keystore:keystore_key *;
   dontaudit su domain:drmservice *;