diff --git a/vendor/file.te b/vendor/file.te
new file mode 100644
index 0000000..61f075b
--- /dev/null
+++ b/vendor/file.te
@@ -0,0 +1,2 @@
+# Privacy LED
+type persist_leds_file, file_type, vendor_persist_type;
diff --git a/vendor/file_contexts b/vendor/file_contexts
index 4b23578..33c5854 100644
--- a/vendor/file_contexts
+++ b/vendor/file_contexts
@@ -6,3 +6,7 @@
 
 # Wifi
 /dev/wlan                               u:object_r:vendor_wlan_device:s0
+
+# Privacy LED
+/vendor/bin/hw/android\.hardware\.lights-service\.tangorpro          u:object_r:hal_light_default_exec:s0
+/mnt/vendor/persist/led(/.*)?                                        u:object_r:persist_leds_file:s0
diff --git a/vendor/genfs_contexts b/vendor/genfs_contexts
index eb64267..c72c5db 100644
--- a/vendor/genfs_contexts
+++ b/vendor/genfs_contexts
@@ -14,3 +14,6 @@ genfscon proc  /nvt_selftest                                           u:object_
 
 # system suspend wakeup files
 genfscon sysfs /devices/platform/google,dock/power_supply/dock/wakeup  u:object_r:sysfs_wakeup:s0
+
+# Privacy LED
+genfscon sysfs /devices/platform/pwmleds/leds/green/brightness         u:object_r:sysfs_leds:s0
diff --git a/vendor/hal_lights.te b/vendor/hal_lights.te
new file mode 100644
index 0000000..ac536de
--- /dev/null
+++ b/vendor/hal_lights.te
@@ -0,0 +1,5 @@
+allow hal_light_default sysfs_leds:dir search;
+allow hal_light_default sysfs_leds:file rw_file_perms;
+allow hal_light_default mnt_vendor_file:dir search;
+allow hal_light_default persist_file:dir search;
+r_dir_file(hal_light_default, persist_leds_file);