diff --git a/private/service_contexts b/private/service_contexts
index 23b2e28..de0caa9 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -47,6 +47,7 @@
 dumpstate                                 u:object_r:dumpstate_service:s0
 ethernet                                  u:object_r:ethernet_service:s0
 fingerprint                               u:object_r:fingerprint_service:s0
+font                                      u:object_r:font_service:s0
 android.hardware.fingerprint.IFingerprintDaemon u:object_r:fingerprintd_service:s0
 gfxinfo                                   u:object_r:gfxinfo_service:s0
 graphicsstats                             u:object_r:graphicsstats_service:s0
diff --git a/public/service.te b/public/service.te
index 858f0b0..d8da930 100644
--- a/public/service.te
+++ b/public/service.te
@@ -61,6 +61,7 @@
 type devicestoragemonitor_service, system_server_service, service_manager_type;
 type diskstats_service, system_api_service, system_server_service, service_manager_type;
 type display_service, app_api_service, system_server_service, service_manager_type;
+type font_service, app_api_service, system_server_service, service_manager_type;
 type netd_listener_service, system_server_service, service_manager_type;
 type DockObserver_service, system_server_service, service_manager_type;
 type dreams_service, app_api_service, system_server_service, service_manager_type;
diff --git a/public/system_server.te b/public/system_server.te
index e1c25c5..e11476c 100644
--- a/public/system_server.te
+++ b/public/system_server.te
@@ -4,6 +4,9 @@
 #
 type system_server, domain, domain_deprecated, mlstrustedsubject;
 
+# Attributes for passthrough hals
+typeattribute system_server hal_light;
+
 # For art.
 allow system_server dalvikcache_data_file:dir r_dir_perms;
 allow system_server dalvikcache_data_file:file { r_file_perms execute };