diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te
index e9bac84e..b709173a 100644
--- a/tracking_denials/dumpstate.te
+++ b/tracking_denials/dumpstate.te
@@ -1,11 +1,6 @@
 # b/208721809
 dontaudit dumpstate fuse:dir { search };
-dontaudit dumpstate hal_graphics_composer_default:binder { call };
 dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find };
 dontaudit dumpstate hal_uwb_vendor_default:binder { call };
 dontaudit dumpstate modem_img_file:filesystem { getattr };
-dontaudit dumpstate vendor_dmabuf_debugfs:file { open };
-dontaudit dumpstate vendor_dmabuf_debugfs:file { read };
 dontaudit dumpstate vold:binder { call };
-# b/208909191
-dontaudit dumpstate vendor_dmabuf_debugfs:file { getattr };
diff --git a/whitechapel_pro/dumpstate.te b/whitechapel_pro/dumpstate.te
index e11e8f7d..05f0b107 100644
--- a/whitechapel_pro/dumpstate.te
+++ b/whitechapel_pro/dumpstate.te
@@ -1,5 +1,13 @@
+dump_hal(hal_graphics_composer)
+
+userdebug_or_eng(`
+  allow dumpstate vendor_dmabuf_debugfs:file r_file_perms;
+')
+
 allow dumpstate sysfs_scsi_devices_0000:file r_file_perms;
 allow dumpstate persist_file:dir r_dir_perms;
 allow dumpstate modem_efs_file:dir r_dir_perms;
 allow dumpstate modem_userdata_file:dir r_dir_perms;
 allow dumpstate modem_img_file:dir r_dir_perms;
+
+dontaudit dumpstate vendor_dmabuf_debugfs:file r_file_perms;