diff --git a/whitechapel/vendor/google/trusty_apploader.te b/whitechapel/vendor/google/trusty_apploader.te
index b3f91794..983e3a03 100644
--- a/whitechapel/vendor/google/trusty_apploader.te
+++ b/whitechapel/vendor/google/trusty_apploader.te
@@ -4,3 +4,4 @@ init_daemon_domain(trusty_apploader)
 
 allow trusty_apploader ion_device:chr_file r_file_perms;
 allow trusty_apploader tee_device:chr_file rw_file_perms;
+allow trusty_apploader dmabuf_system_heap_device:chr_file r_file_perms;