diff --git a/sepolicy/hal_sensors_default.te b/sepolicy/hal_sensors_default.te
new file mode 100644
index 0000000..fcfd7ff
--- /dev/null
+++ b/sepolicy/hal_sensors_default.te
@@ -0,0 +1,4 @@
+# hal_sensors_default.te
+
+# cgroup tasks
+allow hal_sensors_default cgroup:file getattr;