diff --git a/whitechapel_pro/convert-to-f2fs-sh.te b/whitechapel_pro/convert-to-f2fs-sh.te
new file mode 100644
index 00000000..56fc1cc2
--- /dev/null
+++ b/whitechapel_pro/convert-to-f2fs-sh.te
@@ -0,0 +1,10 @@
+type convert-to-f2fs-sh, domain;
+
+type convert-to-f2fs-sh_exec, vendor_file_type, exec_type, file_type;
+
+init_daemon_domain(convert-to-f2fs-sh)
+
+allow convert-to-f2fs-sh vendor_file:file execute_no_trans;
+allow convert-to-f2fs-sh persist_block_device:blk_file r_file_perms;
+allow convert-to-f2fs-sh block_device:dir search;
+allow convert-to-f2fs-sh kernel:process setsched;
diff --git a/whitechapel_pro/file_contexts b/whitechapel_pro/file_contexts
index 888c5ba5..2d35785e 100644
--- a/whitechapel_pro/file_contexts
+++ b/whitechapel_pro/file_contexts
@@ -14,6 +14,7 @@
 /vendor/bin/init\.insmod\.sh                                                u:object_r:init-insmod-sh_exec:s0
 /vendor/bin/trusty_apploader                                                u:object_r:trusty_apploader_exec:s0
 /vendor/bin/trusty_metricsd                                                 u:object_r:trusty_metricsd_exec:s0
+/vendor/bin/convert_to_f2fs\.sh                                             u:object_r:convert-to-f2fs-sh_exec:s0
 /vendor/bin/hw/samsung\.hardware\.media\.c2@1\.0-service                    u:object_r:mediacodec_samsung_exec:s0
 /vendor/bin/hw/google\.hardware\.media\.c2@1\.0-service                     u:object_r:mediacodec_google_exec:s0
 /vendor/bin/hw/android\.hardware\.secure_element@1\.2-service-gto           u:object_r:hal_secure_element_gto_exec:s0