diff --git a/prebuilts/api/28.0/public/dumpstate.te b/prebuilts/api/28.0/public/dumpstate.te
index f3cd8929624b61eb2ca3ee8d3e60d26fcd5cdd00..03fc737eb38910316c4ac218284873402d5f84ee 100644
--- a/prebuilts/api/28.0/public/dumpstate.te
+++ b/prebuilts/api/28.0/public/dumpstate.te
@@ -100,6 +100,7 @@ allow dumpstate debugfs:file r_file_perms;
 allow dumpstate {
   block_device
   cache_file
+  metadata_file
   rootfs
   selinuxfs
   storage_file
diff --git a/prebuilts/api/28.0/public/property_contexts b/prebuilts/api/28.0/public/property_contexts
index b73734522588aa5779a59f6f514e8ae658703c3a..a61cc22953415e7cdcc96bd96f125ffbf94c9c34 100644
--- a/prebuilts/api/28.0/public/property_contexts
+++ b/prebuilts/api/28.0/public/property_contexts
@@ -251,6 +251,7 @@ ro.hardware.hdmi_cec u:object_r:exported_default_prop:s0 exact string
 ro.hardware.hwcomposer u:object_r:exported_default_prop:s0 exact string
 ro.hardware.input u:object_r:exported_default_prop:s0 exact string
 ro.hardware.keystore u:object_r:exported_default_prop:s0 exact string
+ro.hardware.keystore_desede u:object_r:exported_default_prop:s0 exact string
 ro.hardware.lights u:object_r:exported_default_prop:s0 exact string
 ro.hardware.local_time u:object_r:exported_default_prop:s0 exact string
 ro.hardware.memtrack u:object_r:exported_default_prop:s0 exact string
diff --git a/public/dumpstate.te b/public/dumpstate.te
index f3cd8929624b61eb2ca3ee8d3e60d26fcd5cdd00..03fc737eb38910316c4ac218284873402d5f84ee 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -100,6 +100,7 @@ allow dumpstate debugfs:file r_file_perms;
 allow dumpstate {
   block_device
   cache_file
+  metadata_file
   rootfs
   selinuxfs
   storage_file
diff --git a/public/property_contexts b/public/property_contexts
index b73734522588aa5779a59f6f514e8ae658703c3a..a61cc22953415e7cdcc96bd96f125ffbf94c9c34 100644
--- a/public/property_contexts
+++ b/public/property_contexts
@@ -251,6 +251,7 @@ ro.hardware.hdmi_cec u:object_r:exported_default_prop:s0 exact string
 ro.hardware.hwcomposer u:object_r:exported_default_prop:s0 exact string
 ro.hardware.input u:object_r:exported_default_prop:s0 exact string
 ro.hardware.keystore u:object_r:exported_default_prop:s0 exact string
+ro.hardware.keystore_desede u:object_r:exported_default_prop:s0 exact string
 ro.hardware.lights u:object_r:exported_default_prop:s0 exact string
 ro.hardware.local_time u:object_r:exported_default_prop:s0 exact string
 ro.hardware.memtrack u:object_r:exported_default_prop:s0 exact string