diff --git a/sepolicy/hal_sensors.te b/sepolicy/hal_sensors.te
index 4cb4206..99fa7d9 100644
--- a/sepolicy/hal_sensors.te
+++ b/sepolicy/hal_sensors.te
@@ -24,5 +24,5 @@
 set_prop(hal_sensors, sensors_prop)
 
 # Allow access to gralloc shared memory (ion), for sensor direct report
-allow hal_sensors ion_device:chr_file { open read };
+allow hal_sensors ion_device:chr_file { open read ioctl };
 allow hal_sensors hal_graphics_allocator:fd use;