diff --git a/sepolicy/domain.te b/sepolicy/domain.te
new file mode 100644
index 0000000..b1fc15e
--- /dev/null
+++ b/sepolicy/domain.te
@@ -0,0 +1,5 @@
+allow domain block_device:dir { search getattr }; 
+allow domain block_device:blk_file getattr;
+allow domain cache_block_device:blk_file getattr;
+allow domain userdata_block_device:blk_file getattr;
+allow domain fuse_device:chr_file getattr;