diff --git a/sepolicy/oriole/vendor/dump_stm.te b/sepolicy/oriole/vendor/dump_stm.te
index 7d0f237..0fc3837 100644
--- a/sepolicy/oriole/vendor/dump_stm.te
+++ b/sepolicy/oriole/vendor/dump_stm.te
@@ -1,7 +1,7 @@
-get_prop(dump_stm, vendor_touch_dump_path_prop)
-
 pixel_bugreport(dump_stm)
 
+get_prop(dump_stm, vendor_touch_dump_path_prop)
+
 allow dump_stm proc_touch:file rw_file_perms;
 allow dump_stm sysfs_touch:dir search;
 allow dump_stm sysfs_touch:file rw_file_perms;
diff --git a/sepolicy/vendor/hal_wlcservice.te b/sepolicy/vendor/hal_wlcservice.te
index 8eb7010..68b99dc 100644
--- a/sepolicy/vendor/hal_wlcservice.te
+++ b/sepolicy/vendor/hal_wlcservice.te
@@ -2,6 +2,8 @@ type hal_wlcservice, domain;
 type hal_wlcservice_exec, exec_type, file_type, vendor_file_type;
 type hal_wlcservice_service, hal_service_type, protected_service, service_manager_type;
 
+hal_client_domain(hal_wlcservice, hal_health)
+
 add_service(hal_wlcservice, hal_wlcservice_service)
 
 binder_call(hal_wlcservice, hal_health_default)
@@ -10,8 +12,6 @@ binder_call(hal_wlcservice, servicemanager)
 
 binder_use(hal_wlcservice)
 
-hal_client_domain(hal_wlcservice, hal_health)
-
 init_daemon_domain(hal_wlcservice)
 
 set_prop(hal_wlcservice, vendor_wlcservice_prop)