diff --git a/aoc/sepolicy/dump_aoc.te b/aoc/sepolicy/dump_aoc.te
new file mode 100644
index 0000000..f5f085c
--- /dev/null
+++ b/aoc/sepolicy/dump_aoc.te
@@ -0,0 +1,7 @@
+pixel_bugreport(dump_aoc)
+allow dump_aoc sysfs_aoc:dir search;
+allow dump_aoc sysfs_aoc_dumpstate:file r_file_perms;
+allow dump_aoc aoc_device:chr_file rw_file_perms;
+allow dump_aoc vendor_shell_exec:file execute_no_trans;
+allow dump_aoc vendor_toolbox_exec:file execute_no_trans;
+
diff --git a/aoc/sepolicy/file_contexts b/aoc/sepolicy/file_contexts
new file mode 100644
index 0000000..bfeb604
--- /dev/null
+++ b/aoc/sepolicy/file_contexts
@@ -0,0 +1 @@
+/vendor/bin/dump/dump_aoc      u:object_r:dump_aoc_exec:s0