diff --git a/sepolicy/su.te b/sepolicy/su.te
index 01d665f..7510f1e 100644
--- a/sepolicy/su.te
+++ b/sepolicy/su.te
@@ -30,7 +30,8 @@ typeattribute su mlstrustedsubject;
 allow phhsu_daemon { system_api_service app_api_service system_server_service }:service_manager find;
 
 allow system_server phhsu_daemon:fd use;
-allow system_server phhsu_daemon:binder { call };
+allow system_server phhsu_daemon:binder { call transfer };
+allow system_server shell_devpts:chr_file { read write };
 
 # Add su to various domains
 net_domain(su)