diff --git a/vendor/hal_camera_default.te b/vendor/hal_camera_default.te
index 666ad738..986ddd90 100644
--- a/vendor/hal_camera_default.te
+++ b/vendor/hal_camera_default.te
@@ -7,6 +7,8 @@ allow hal_camera_default lwis_device:chr_file rw_file_perms;
 
 # Face authentication code that is part of the camera HAL needs to allocate
 # dma_bufs and access the Trusted Execution Environment device node
+allow hal_camera_default dmabuf_system_heap_device:chr_file r_file_perms;
+allow hal_camera_default tee_device:chr_file rw_file_perms;
 
 # Allow the camera hal to access the EdgeTPU service and the
 # Android shared memory allocated by the EdgeTPU service for