diff --git a/sepolicy/mediadrmserver.te b/sepolicy/mediadrmserver.te
new file mode 100644
index 0000000..4c594ee
--- /dev/null
+++ b/sepolicy/mediadrmserver.te
@@ -0,0 +1,2 @@
+allow mediadrmserver video_device:chr_file rw_file_perms;
+allow mediadrmserver gpu_device:chr_file rw_file_perms;