diff --git a/whitechapel/vendor/google/fastbootd.te b/whitechapel/vendor/google/fastbootd.te
index 32944aa1..f9d09d95 100644
--- a/whitechapel/vendor/google/fastbootd.te
+++ b/whitechapel/vendor/google/fastbootd.te
@@ -1,5 +1,6 @@
 # Required by the bootcontrol HAL for the 'set_active' command.
 recovery_only(`
+allow fastbootd secure_element_device:chr_file rw_file_perms;
 allow fastbootd devinfo_block_device:blk_file rw_file_perms;
 allow fastbootd sda_block_device:blk_file rw_file_perms;
 allow fastbootd sysfs_ota:file rw_file_perms;
diff --git a/whitechapel/vendor/google/recovery.te b/whitechapel/vendor/google/recovery.te
index 6eb97aa3..4687a43c 100644
--- a/whitechapel/vendor/google/recovery.te
+++ b/whitechapel/vendor/google/recovery.te
@@ -1,3 +1,4 @@
 recovery_only(`
   allow recovery sysfs_ota:file rw_file_perms;
+  allow recovery secure_element_device:chr_file rw_file_perms;
 ')