diff --git a/sepolicy/resize.te b/sepolicy/resize.te
new file mode 100644
index 0000000..12d95c6
--- /dev/null
+++ b/sepolicy/resize.te
@@ -0,0 +1,6 @@
+allow update_engine { toolbox_exec system_file }:file rx_file_perms;
+allow update_engine labeledfs:filesystem remount;
+
+allow update_engine sysfs_fs_ext4_features:dir r_dir_perms;
+allow update_engine sysfs_fs_ext4_features:file r_file_perms;
+allow update_engine self:capability { sys_resource };