diff --git a/BoardCommonConfig.mk b/BoardCommonConfig.mk
index abef610..fcd79df 100644
--- a/BoardCommonConfig.mk
+++ b/BoardCommonConfig.mk
@@ -163,6 +163,7 @@ BOARD_SEPOLICY_UNION += \
     file.te \
     file_contexts \
     init.te \
+    kernel.te \
     mediaserver.te \
     rild.te \
     system_app.te \
diff --git a/selinux/kernel.te b/selinux/kernel.te
new file mode 100644
index 0000000..3a08988
--- /dev/null
+++ b/selinux/kernel.te
@@ -0,0 +1 @@
+allow kernel block_device:blk_file write;