diff --git a/sepolicy/keystore.te b/sepolicy/keystore.te
new file mode 100644
index 0000000..0ae4112
--- /dev/null
+++ b/sepolicy/keystore.te
@@ -0,0 +1,3 @@
+allow keystore domain:process getattr;
+allow keystore domain:dir r_dir_perms;
+allow keystore domain:file r_file_perms;