diff --git a/whitechapel/vendor/google/file.te b/whitechapel/vendor/google/file.te
index a2b0a4fd..ae4ec433 100644
--- a/whitechapel/vendor/google/file.te
+++ b/whitechapel/vendor/google/file.te
@@ -200,3 +200,6 @@ type uwb_vendor_data_file, file_type, data_file_type, app_data_file_type;
 
 # PixelStats_vendor
 type sysfs_pixelstats, fs_type, sysfs_type;
+
+# WLC FW
+type vendor_wlc_fwupdata_file, vendor_file_type, file_type;
diff --git a/whitechapel/vendor/google/file_contexts b/whitechapel/vendor/google/file_contexts
index fe5e846e..8a1b54a9 100644
--- a/whitechapel/vendor/google/file_contexts
+++ b/whitechapel/vendor/google/file_contexts
@@ -664,3 +664,7 @@
 
 # Wifi Firmware config update
 /data/vendor/firmware/wifi(/.*)?                                               u:object_r:updated_wifi_firmware_data_file:s0
+
+# WLC FW update
+/vendor/bin/wlc_upt/p9412_mtp            u:object_r:vendor_wlc_fwupdata_file:s0
+/vendor/bin/wlc_upt/wlc_fw_update\.sh    u:object_r:wlcfwupdate_exec:s0
diff --git a/whitechapel/vendor/google/wlcfwupdate.te b/whitechapel/vendor/google/wlcfwupdate.te
new file mode 100644
index 00000000..37c29484
--- /dev/null
+++ b/whitechapel/vendor/google/wlcfwupdate.te
@@ -0,0 +1,12 @@
+# wlcfwupdate service
+type wlcfwupdate, domain;
+type wlcfwupdate_exec, vendor_file_type, exec_type, file_type;
+
+init_daemon_domain(wlcfwupdate)
+
+allow wlcfwupdate sysfs_batteryinfo:dir search;
+allow wlcfwupdate sysfs_batteryinfo:file r_file_perms;
+allow wlcfwupdate sysfs_wlc:dir search;
+allow wlcfwupdate sysfs_wlc:file rw_file_perms;
+allow wlcfwupdate vendor_toolbox_exec:file execute_no_trans;
+allow wlcfwupdate vendor_wlc_fwupdata_file:file execute_no_trans;