diff --git a/public/hal_fingerprint.te b/public/hal_fingerprint.te
index 3d8a78d..db0fc6d 100644
--- a/public/hal_fingerprint.te
+++ b/public/hal_fingerprint.te
@@ -18,4 +18,7 @@
 # For memory allocation
 allow hal_fingerprint ion_device:chr_file r_file_perms;
 
+# Allow fingerprint to find and call keystore binder interfaces
+binder_use(hal_fingerprint);
+
 r_dir_file(hal_fingerprint, cgroup)
diff --git a/public/system_server.te b/public/system_server.te
index 2cf511f..6c59e55 100644
--- a/public/system_server.te
+++ b/public/system_server.te
@@ -155,6 +155,7 @@
 binder_call(system_server, binderservicedomain)
 binder_call(system_server, dumpstate)
 binder_call(system_server, fingerprintd)
+binder_call(system_server, hal_fingerprint)
 binder_call(system_server, gatekeeperd)
 binder_call(system_server, installd)
 binder_call(system_server, netd)