diff --git a/fingerprint_capacitance/file.te b/fingerprint_capacitance/file.te
new file mode 100644
index 0000000..0218b46
--- /dev/null
+++ b/fingerprint_capacitance/file.te
@@ -0,0 +1 @@
+type sysfs_fingerprint, sysfs_type, fs_type;
diff --git a/fingerprint_capacitance/file_contexts b/fingerprint_capacitance/file_contexts
new file mode 100644
index 0000000..aa6d801
--- /dev/null
+++ b/fingerprint_capacitance/file_contexts
@@ -0,0 +1 @@
+/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint-service\.fpc42    u:object_r:hal_fingerprint_capacitance_exec:s0
diff --git a/fingerprint_capacitance/genfs_contexts b/fingerprint_capacitance/genfs_contexts
new file mode 100644
index 0000000..9fe2a86
--- /dev/null
+++ b/fingerprint_capacitance/genfs_contexts
@@ -0,0 +1 @@
+genfscon sysfs /devices/platform/odm/odm:fp_fpc1020     u:object_r:sysfs_fingerprint:s0
diff --git a/fingerprint_capacitance/hal_fingerprint_capacitance.te b/fingerprint_capacitance/hal_fingerprint_capacitance.te
new file mode 100644
index 0000000..23b31e4
--- /dev/null
+++ b/fingerprint_capacitance/hal_fingerprint_capacitance.te
@@ -0,0 +1,24 @@
+# hal_fingerprint_capacitance definition
+type hal_fingerprint_capacitance, domain;
+hal_server_domain(hal_fingerprint_capacitance, hal_fingerprint)
+
+type hal_fingerprint_capacitance_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_fingerprint_capacitance)
+
+set_prop(hal_fingerprint_capacitance, vendor_fingerprint_prop)
+
+# allow fingerprint to access file
+allow hal_fingerprint_capacitance fingerprint_device:chr_file rw_file_perms;
+allow hal_fingerprint_capacitance tee_device:chr_file rw_file_perms;
+allow hal_fingerprint_capacitance sysfs_fingerprint:dir r_dir_perms;
+allow hal_fingerprint_capacitance sysfs_fingerprint:file rw_file_perms;
+
+# allow fingerprint to access power hal
+hal_client_domain(hal_fingerprint_capacitance, hal_power);
+
+# allow fingerprint to find fwk service
+allow hal_fingerprint_capacitance fwk_stats_service:service_manager find;
+
+# allow fingerprint to access input_device
+allow hal_fingerprint_capacitance input_device:dir r_dir_perms;
+allow hal_fingerprint_capacitance input_device:chr_file rw_file_perms;
diff --git a/tangorpro-sepolicy.mk b/tangorpro-sepolicy.mk
index 97cf380..6df37be 100644
--- a/tangorpro-sepolicy.mk
+++ b/tangorpro-sepolicy.mk
@@ -1,2 +1,5 @@
 # sepolicy that are shared among devices using whitechapel
 BOARD_SEPOLICY_DIRS += device/google/tangorpro-sepolicy/vendor
+
+# fingerprint
+BOARD_SEPOLICY_DIRS += device/google/tangorpro-sepolicy/fingerprint_capacitance