diff --git a/sepolicy/update_verifier.te b/sepolicy/update_verifier.te
new file mode 100644
index 0000000..aeee653
--- /dev/null
+++ b/sepolicy/update_verifier.te
@@ -0,0 +1,4 @@
+# Read the sysfs to lookup what /dev/sgN device
+# corresponds to the XBL partitions.
+allow update_verifier sysfs:file r_file_perms;
+allow update_verifier sysfs:dir r_dir_perms;