diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil
index 3ce030eed00486b5c6a9f4011bd22f28f8b4cec7..9da748a92c96f88d5850b44d5d5af0e3ce5236c4 100644
--- a/private/compat/26.0/26.0.ignore.cil
+++ b/private/compat/26.0/26.0.ignore.cil
@@ -67,6 +67,7 @@
     sysfs_fs_ext4_features
     system_boot_reason_prop
     system_net_netd_hwservice
+    system_update_service
     thermal_service
     thermalcallback_hwservice
     thermalserviced
diff --git a/private/priv_app.te b/private/priv_app.te
index ec52d5691d14c8db1a826a4fafc0c5cd446ea516..e3eec831d063e582543036d873b35ca411e75751 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -96,6 +96,10 @@ allow priv_app update_engine_service:service_manager find;
 binder_call(priv_app, storaged)
 allow priv_app storaged_service:service_manager find;
 
+# Allow GMS core to access system_update_service (e.g. to publish pending
+# system update info).
+allow priv_app system_update_service:service_manager find;
+
 # Allow GMS core to communicate with statsd.
 binder_call(priv_app, statsd)
 
diff --git a/private/service_contexts b/private/service_contexts
index 6f33c8975bf509b3927e3dce84963f26ef9b3c62..c1ea51a925829fd7394f0ddaf0678f867f43a287 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -151,6 +151,7 @@ statusbar                                 u:object_r:statusbar_service:s0
 storaged                                  u:object_r:storaged_service:s0
 storagestats                              u:object_r:storagestats_service:s0
 SurfaceFlinger                            u:object_r:surfaceflinger_service:s0
+system_update                             u:object_r:system_update_service:s0
 task                                      u:object_r:task_service:s0
 telecom                                   u:object_r:telecom_service:s0
 telephony.registry                        u:object_r:registry_service:s0
diff --git a/public/service.te b/public/service.te
index 704e2452ecb34ff6a1ff3a5a4b27436181fdfe22..44c3ef6ca01db7c1004db5363528f9893e3617e1 100644
--- a/public/service.te
+++ b/public/service.te
@@ -131,6 +131,7 @@ type shortcut_service, app_api_service, system_server_service, service_manager_t
 type slice_service, app_api_service, system_server_service, service_manager_type;
 type statusbar_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type storagestats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
+type system_update_service, system_server_service, service_manager_type;
 type task_service, system_server_service, service_manager_type;
 type textclassification_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type textservices_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;