diff --git a/private/hal_widevine_system.te b/private/hal_widevine_system.te
index 57213b3..2623249 100644
--- a/private/hal_widevine_system.te
+++ b/private/hal_widevine_system.te
@@ -5,3 +5,6 @@
 init_daemon_domain(hal_widevine_system)
 
 allow hal_widevine_system self:vsock_socket { create_socket_perms_no_ioctl };
+
+get_prop(hal_widevine_system, drm_config_prop)
+get_prop(hal_widevine_system, trusty_widevine_vm_sys_prop)