diff --git a/vendor/tee.te b/vendor/tee.te
index 0a6139b..a4153be 100644
--- a/vendor/tee.te
+++ b/vendor/tee.te
@@ -1,3 +1,4 @@
 allow tee tee_persist_block_device:blk_file rw_file_perms;
 allow tee tee_userdata_block_device:blk_file rw_file_perms;
-allow tee tee_data_file:lnk_file create;
+allow tee tee_data_file:lnk_file { create read };
+allow tee persist_ss_file:lnk_file { create read };