diff --git a/tracking_denials/hal_wifi_ext.te b/tracking_denials/hal_wifi_ext.te
deleted file mode 100644
index bae274fd..00000000
--- a/tracking_denials/hal_wifi_ext.te
+++ /dev/null
@@ -1,9 +0,0 @@
-# b/262455388
-dontaudit hal_wifi_ext grilservice_app:binder { call };
-# b/262794359
-dontaudit hal_wifi_ext updated_wifi_firmware_data_file:dir { search };
-dontaudit hal_wifi_ext vendor_wifi_version:property_service { set };
-# b/264489958
-userdebug_or_eng(`
-  permissive hal_wifi_ext;
-')
\ No newline at end of file
diff --git a/vendor/hal_wifi_ext.te b/vendor/hal_wifi_ext.te
new file mode 100644
index 00000000..9b52d7aa
--- /dev/null
+++ b/vendor/hal_wifi_ext.te
@@ -0,0 +1,9 @@
+# Allow wifi_ext to report callbacks to gril-service app
+binder_call(hal_wifi_ext, grilservice_app)
+
+# Write wlan driver/fw version into property
+set_prop(hal_wifi_ext, vendor_wifi_version)
+
+# Allow wifi_ext to read and write /data/vendor/firmware/wifi
+allow hal_wifi_ext updated_wifi_firmware_data_file:dir rw_dir_perms;
+allow hal_wifi_ext updated_wifi_firmware_data_file:file create_file_perms;