diff --git a/sepolicy/mediatek.te b/sepolicy/mediatek.te
new file mode 100644
index 0000000..cdab7c0
--- /dev/null
+++ b/sepolicy/mediatek.te
@@ -0,0 +1,3 @@
+type hal_graphics_allocator_default, domain; 
+type proc_ged, file_type; 
+allowxperm domain proc_ged:file ioctl { 0x6700-0x67ff };