diff --git a/vrcore/sepolicy/vr_hwc.te b/vrcore/sepolicy/vr_hwc.te
new file mode 100644
index 0000000..2b5730c
--- /dev/null
+++ b/vrcore/sepolicy/vr_hwc.te
@@ -0,0 +1,3 @@
+# VrCore registers a callback with VR HWC. The callback is then used to post new
+# frames to VrCore.
+binder_call(vr_hwc, vrcore_app)
diff --git a/vrcore/sepolicy/vrcore_app.te b/vrcore/sepolicy/vrcore_app.te
index 4515b50..71cd9a4 100644
--- a/vrcore/sepolicy/vrcore_app.te
+++ b/vrcore/sepolicy/vrcore_app.te
@@ -27,6 +27,8 @@
 
 # VrCore-specific services.
 allow vrcore_app vr_manager_service:service_manager find;
+allow vrcore_app vr_hwc_service:service_manager find;
+allow vrcore_app virtual_touchpad_service:service_manager find;
 
 # gdbserver for ndk-gdb ptrace attaches to app process.
 allow vrcore_app self:process ptrace;