diff --git a/common/vendor/te_macros b/common/vendor/te_macros
index c9a9c04..99873fe 100644
--- a/common/vendor/te_macros
+++ b/common/vendor/te_macros
@@ -12,6 +12,7 @@
 allow $1 dumpstate:fd use;
 allow $1 dumpstate:fifo_file { write getattr };
 allow $1 hal_dumpstate_default:fd use;
+allow hal_dumpstate_default $1:process { sigkill signal };
 allow $1 shell_data_file:file { write getattr };
 ')
 
diff --git a/turbo_adapter/seapp_contexts b/turbo_adapter/private/seapp_contexts
similarity index 100%
rename from turbo_adapter/seapp_contexts
rename to turbo_adapter/private/seapp_contexts
diff --git a/turbo_adapter/turbo_adapter.te b/turbo_adapter/private/turbo_adapter.te
similarity index 93%
rename from turbo_adapter/turbo_adapter.te
rename to turbo_adapter/private/turbo_adapter.te
index 63cb193..5eb76c1 100644
--- a/turbo_adapter/turbo_adapter.te
+++ b/turbo_adapter/private/turbo_adapter.te
@@ -2,7 +2,7 @@
 # this means that TurboAdapter doesn't get the platform_app permissions any more, so we need to
 # list everything that it needs here.
 
-type turbo_adapter, domain, coredomain, system_suspend_internal_server;
+typeattribute turbo_adapter coredomain, system_suspend_internal_server;
 
 app_domain(turbo_adapter)
 
diff --git a/turbo_adapter/public/turbo_adapter.te b/turbo_adapter/public/turbo_adapter.te
new file mode 100644
index 0000000..ef2ec65
--- /dev/null
+++ b/turbo_adapter/public/turbo_adapter.te
@@ -0,0 +1 @@
+type turbo_adapter, domain;