diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 7e9ba17..0668ef5 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -22,8 +22,7 @@
 
 #############
 # Superuser's control sockets
-/dev/com.android.settings.daemon(/.*)?   u:object_r:superuser_device:s0
-/dev/com.android.settings(/.*)?   u:object_r:superuser_device:s0
+/dev/socket/su-daemon(/.*)?   u:object_r:superuser_device:s0
 
 # Expansion of these hooks is a bit unconventional
 /cache/com.cyanogenmod.keyhandler.dex   u:object_r:dalvikcache_data_file:s0
diff --git a/sepolicy/su.te b/sepolicy/su.te
index 8e63b2f..c2c68fd 100644
--- a/sepolicy/su.te
+++ b/sepolicy/su.te
@@ -6,6 +6,8 @@
 
 userdebug_or_eng(`
   domain_trans(init, su_exec, sudaemon)
+
+  type_transition sudaemon socket_device:sock_file superuser_device;
   # The userspace app uses /dev sockets to control per-app access
   allow sudaemon superuser_device:dir { create rw_dir_perms setattr unlink };
   allow sudaemon superuser_device:sock_file { create setattr unlink write };